In Activity 17-3 (page 149 of the printed text; page 159 of the Kindle version) there is an incorrect hyperlink. Bulk Extractor can be found at:
In Chapter 20, the activity should have been named as a demonstration. There is no evidence file to accompany this demonstration. Readers can use their own forensic image to perform the steps.