The Forensic Discovery book by Dan Farmer and Wietse Venema is now available online. It is a good read and the physical manifestation sits proudly on my desk.

I really liked Chapter 7 on The Persistence of Deleted File Information as well as Appendix B on Data Gathering and the Order of Volatility.

Highly recommended.

The link to the book is here.