Investigating Windows Systems

by Harlan Carvey

Overview

Unlike other books, courses and training that expect an analyst to piece together individual instructions into a cohesive investigation, Investigating Windows Systems provides a walk-through of the analysis process, with descriptions of the thought process and analysis decisions along the way.

Investigating Windows Systems will not address topics which have been covered in other books, but will expect the reader to have some ability to discover the detailed usage of tools and to perform their own research. The focus of this volume is to provide a walk-through of the analysis process, with descriptions of the thought process and the analysis decisions made along the way.

A must-have guide for those in the field of digital forensic analysis and incident response.

Product Details

ISBN-13:	9780128114155
Publisher:	Elsevier Science
Publication date:	08/16/2018
Pages:	136
Product dimensions:	6.00(w) x 9.00(h) x (d)

About the Author

Mr. Carvey is a digital forensics and incident response analyst with past experience in vulnerability assessments, as well as some limited pen testing. He conducts research into digital forensic analysis of Window systems, identifying and parsing various digital artifacts from those systems, and has developed several innovative tools and investigative processes specific to the digital forensics analysis field. He is the developer of RegRipper, a widely-used tool for Windows Registry parsing and analysis. Mr. Carvey has developed and taught several courses, including Windows Forensics, Registry, and Timeline Analysis.

Table of Contents

1. Introduction2. Malware Detection3. User Activity4. Test Environment5. Field Manual

What People are Saying About This

From the Publisher

A cradle-to-grave analysis of Windows systems for anyone engaging in the field of digital forensics and incident response