Investigating Windows Systems

ISBN: 9780128114155 出版年：2018 页码：137 Carvey, Harlan Academic Press_RM

Unlike other books, courses and training that expect an analyst to piece together individual instructions into a cohesive investigation, Investigating Windows Systems provides a walk-through of the analysis process, with descriptions of the thought process and analysis decisions along the way. Investigating Windows Systems will not address topics which have been covered in other books, but will expect the reader to have some ability to discover the detailed usage of tools and to perform their own research. The focus of this volume is to provide a walk-through of the analysis process, with descriptions of the thought process and the analysis decisions made along the way. A must-have guide for those in the field of digital forensic analysis and incident response.Provides the reader with a detailed walk-through of the analysis process, with decision points along the way, assisting the user in understanding the resulting dataCoverage will include malware detection, user activity, and how to set up a testing environmentWritten at a beginner to intermediate level for anyone engaging in the field of digital forensic analysis and incident response