📘 Notable Titles
- EnCase Computer Forensics: The Official EnCE – EnCase Certified Examiner Study Guide (1st–3rd Editions) One of the few digital forensics texts to reach a third edition, this is regarded as the foundational text in digital forensics, as this book became known as “the bible” for EnCase examiners and forensic practitioners in general, worldwide.
- Mastering Windows Network Forensics and Investigation (1st–2nd Editions)

📝 Articles & Insights
In addition to his books, Bunting regularly publishes case-driven analyses and thought pieces exploring the evolving challenges of digital forensics:
- How Did That Photo Get on That iPhone? – DFIR Review (Peer-Reviewed), April 2024
- How Did That Photo Get on That iPhone? – Deep Dive into the iOS “Photos.sqlite” database, MSAB Blog/Whitepaper, March 2023
- Forensic Analysis of Spoliation and Other Discovery Violations – Part 1 (Macintosh Examinations) – eForensics Magazine, October 2016
- Forensic Analysis of Spoliation and Other Discovery Violations – Part 2 (Windows Examinations) – eForensics Magazine, December 2016
- The Digital Crash – Hypothetical case using mobile data to analyze distraction at impact
- Reconstructing Distraction – A joint publication from Bunting Digital Forensics (U.S.) – Steve Bunting, Deep Dive (Albania) – Marsela Onuzi, and Cybir (U.S.) – Michael Nelson, presenting real crash detection and distraction data across iPhone and Android. Includes motion testing, sysdiagnose analysis, and log timelines from actual forensic cases and testing scenarios.
- When the Chain Breaks – Analysis of evidence tampering and metadata manipulation in a federal case
To request reprints, media interviews, or speaking engagements, please see the Contact page.
