Windows Forensic Analysis Toolkit : Advanced Analysis Techniques for Windows 8

Carvey, Harlan

ISBN 10: 0124171575 / ISBN 13: 9780124171572

Published by Elsevier Science & Technology Books, 2014

About this Item

Ships from the UK. Former library book; may include library markings. Used book that is in excellent condition. May show signs of wear or have minor defects.

Seller Inventory # 47099679-6

Bibliographic Details

• Title: Windows Forensic Analysis Toolkit : Advanced Analysis Techniques for Windows 8
• Publisher: Elsevier Science & Technology Books
• Publication Date: 2014
• Language: English
• ISBN 10: 0124171575
• ISBN 13: 9780124171572
• Binding: Soft cover
• Edition: 4th Edition
• Condition: Very Good
• Weight: 1.58 pounds

About this title

Synopsis

Harlan Carvey has updated Windows Forensic Analysis Toolkit, now in its fourth edition, to cover Windows 8 systems. The primary focus of this edition is on analyzing Windows 8 systems and processes using free and open-source tools. The book covers live response, file analysis, malware detection, timeline, and much more. Harlan Carvey presents real-life experiences from the trenches, making the material realistic and showing the why behind the how. The companion and toolkit materials are hosted online. This material consists of electronic printable checklists, cheat sheets, free custom tools, and walk-through demos. This edition complements Windows Forensic Analysis Toolkit, Second Edition, which focuses primarily on XP, and Windows Forensic Analysis Toolkit, Third Edition, which focuses primarily on Windows 7. This new fourth edition provides expanded coverage of many topics beyond Windows 8 as well, including new cradle-to-grave case examples, USB device analysis, hacking and intrusion cases, and "how would I do this" from Harlan's personal case files and questions he has received from readers. The fourth edition also includes an all-new chapter on reporting.

About the Author

Mr. Carvey is a digital forensics and incident response analyst with past experience in vulnerability assessments, as well as some limited pen testing. He conducts research into digital forensic analysis of Window systems, identifying and parsing various digital artifacts from those systems, and has developed several innovative tools and investigative processes specific to the digital forensics analysis field. He is the developer of RegRipper, a widely-used tool for Windows Registry parsing and analysis. Mr. Carvey has developed and taught several courses, including Windows Forensics, Registry, and Timeline Analysis.