Chapter 25 — Further Reading

Foundations (🔬 deeper)

• The cases themselves — read the opinions, not just the summaries. Katz v. United States (1967), Riley v. California (2014), Carpenter v. United States (2018), and United States v. Jones (2012) are short, readable, and free on any court-opinion site. Reading Chief Justice Roberts's "get a warrant" reasoning in Riley will teach you more about digital privacy than any treatise.
• Orin Kerr, Computer Crime Law (West) and his law-review articles (e.g., "Searches and Seizures in a Digital World," "The Fourth Amendment and the Global Internet"). The single most influential academic voice on how the Fourth Amendment maps onto digital evidence; start here for the doctrine behind the doctrine.
• The Sedona Conference publications — the Principles on electronic document production, the Commentary on Legal Holds, and the International Principles on Discovery, Disclosure & Data Protection. The consensus reference for eDiscovery practice and cross-border data conflicts; widely cited by courts.

Approachable explanations (everyone)

• The Federal Rules themselves — read the actual text once. FRCP 26, 34, and 37(e); Federal Rules of Evidence 702, 901, 902(13)/(14), and 1006; and Fed. R. Crim. P. 41. They are shorter and plainer than you expect, and the annotations explain the rest.
• EFF's Surveillance Self-Defense and Know Your Rights guides (eff.org). Plain-language explanations of border-device searches, compelled decryption, and what to do when devices are seized — practical and current.
• Nelson, Phillips & Steuart, Guide to Computer Forensics and Investigations (Cengage), legal chapters. A classroom-friendly walk through warrants, consent, and corporate authority with examples — a gentle on-ramp if the case law feels dense.

In practice (💾 Recovery · 🔍 Examiner · 🛡️ IR · 📜 Legal)

• 🔍📜 DOJ, Searching and Seizing Computers and Obtaining Electronic Evidence in Criminal Investigations (the "CCIPS Manual"). The government's own field manual on digital warrants, scope, plain view, and the two-step search — invaluable for understanding how the other side is trained to think.
• 🛡️ CBP Directive No. 3340-049A (2018) on border searches of electronic devices. Read the "basic" vs. "advanced" distinction before you ever fly internationally with case or client data.
• 📜 SWGDE and NIST CFTT materials (swgde.org; cftt.nist.gov). The validation and best-practice documents that make your method survive a Daubert challenge — the bridge from "I did it right" to "I can prove my tools are reliable."
• 💾 Your own engagement letter and intake form. The recovery practitioner's version of "authority": a signed authorization from someone who actually owns the data, with a scope statement — exactly the gap the Recovery vs. Forensics callout warns about.

Reference (this book)

• Appendix E — Legal Frameworks Reference: the 4th/5th Amendments, warrants, FRCP/eDiscovery, Daubert/Frye, GDPR, CLOUD Act, and MLAT tabulated — the cheat sheet to this chapter (but never a substitute for counsel).
• Appendix F — Chain-of-Custody and Report Templates: the consent form, litigation-hold notice, and authority/scope memo you draft in the exercises.
• Chapter 5 — The Forensic Process: scope discipline and the chain of custody this chapter rests on · Chapter 27 — Expert Testimony: defending these standards under oath · Chapter 28 — Ethics: mandatory reporting and examiner well-being.

Do, don't just read

• Read one real warrant. Find a published digital-search warrant (many appear in court filings) and locate its Attachment B. Mark what is in scope and what is not — then imagine a file that falls just outside it and rehearse the second-warrant discipline aloud.
• Draft your own templates. Using Appendix F, write a consent-to-search form, a login banner, and a litigation-hold notice you would actually be willing to rely on. The progressive-project exercises walk you through the Authority and Scope Memo.
• Write the "stop" card. Make the physical Stop-and-Escalate decision card from the exercises and keep it where you work. The instinct to pause is a skill, and skills are built by rehearsal, not by reading.

Next: Chapter 26 — The Forensic Report: everything you lawfully acquired becomes the document a court reads — separating fact from opinion, tying each finding to its evidence, and surviving the cross-examination to come.