Digital Forensics for Network, Internet, and Cloud Computing (DFFNIACC) is one of the worst books I’ve read in the last few years. This book is very similar to the Syngress book “Botnets” which I gave 2 stars in 2008. Save your money and skip DFFNIacc; only the chapter on NetFlow and another offering a general overview of NetWitness are worth reading. This is a collection of incoherent thoughts, loosely bound by the idea of “forensics” but clearly not subjected to any real planning or oversight.”]
Source: https://taosecurity.blogspot.com/2010/07/review-of-digital-forensics-for-network.html