Digital forensics specialist’s bookshelf

A Group-IB analyst curates 11 recommended books spanning digital forensics and incident response, Windows and file-system analysis, memory and network forensics, mobile forensics (iOS/Android/Windows), and malware reverse engineering (including Android, YARA, rootkits/bootkits). Each entry highlights practical skills, tools, and methodologies (e.g., Sleuth Kit/Autopsy, SANS FOR508) to help readers build hands-on expertise from fundamentals to advanced research.