Computer Forensics: Incident Response Essential- 0201707195, paperback, Kruse II

A nice touch in this textbook is the cheat sheet for common formulas.