Investigating Windows Systems

Erscheinungsjahr 2018
ISBN: 978-0-12-811415-5
Verlag: William Andrew Publishing

Buch, Englisch, 136 Seiten, Format (B × H): 152 mm x 229 mm, Gewicht: 230 g

Unlike other books, courses and training that expect an analyst to piece together individual instructions into a cohesive investigation, Investigating Windows Systems provides a walk-through of the analysis process, with descriptions of the thought process and analysis decisions along the way.

Investigating Windows Systems will not address topics which have been covered in other books, but will expect the reader to have some ability to discover the detailed usage of tools and to perform their own research. The focus of this volume is to provide a walk-through of the analysis process, with descriptions of the thought process and the analysis decisions made along the way.

A must-have guide for those in the field of digital forensic analysis and incident response.

Zielgruppe

<p>Primary: Digital forensic professionals and analysts, information security professionals, researchers, and practitioners.</p> <p>Secondary: Students in digital forensics programs at community college or university.</p>

Autoren/Hrsg.

Carvey, Harlan

Fachgebiete

• Sozialwissenschaften Soziologie | Soziale Arbeit Spezielle Soziologie Kriminalsoziologie

Inhaltsverzeichnis

1. Introduction2. Malware Detection3. User Activity4. Test Environment5. Field Manual

Über Autor(innen)

Carvey, Harlan
Mr. Carvey is a digital forensics and incident response analyst with past experience in vulnerability assessments, as well as some limited pen testing. He conducts research into digital forensic analysis of Window systems, identifying and parsing various digital artifacts from those systems, and has developed several innovative tools and investigative processes specific to the digital forensics analysis field. He is the developer of RegRipper, a widely-used tool for Windows Registry parsing and analysis. Mr. Carvey has developed and taught several courses, including Windows Forensics, Registry, and Timeline Analysis.