Get Free Shipping on orders over $79
Windows Forensics : Understand Analysis Techniques for Your Windows - Chuck Easttom

Windows Forensics

Understand Analysis Techniques for Your Windows

By: Chuck Easttom, William Butler, Jessica Phelan, Ramya Sai Bhagavatula, Karely Rodriguez

eText | 29 May 2024

At a Glance

eText


$89.00

or 4 interest-free payments of $22.25 with

 or 

Instant online reading in your Booktopia eTextbook Library *

Why choose an eTextbook?

Instant Access *

Purchase and read your book immediately

Read Aloud

Listen and follow along as Bookshelf reads to you

Study Tools

Built-in study tools like highlights and more

* eTextbooks are not downloadable to your eReader or an app and can be accessed via web browsers only. You must be connected to the internet and have no technical issues with your device or browser that could prevent the eTextbook from operating.

This book is your comprehensive guide to Windows forensics. It covers the process of conducting or performing a forensic investigation of systems that run on Windows operating systems. It also includes analysis of incident response, recovery, and auditing of equipment used in executing any criminal activity.

The book covers Windows registry, architecture, and systems as well as forensic techniques, along with coverage of how to write reports, legal standards, and how to testify. It starts with an introduction to Windows followed by forensic concepts and methods of creating forensic images. You will learn Windows file artefacts along with Windows Registry and Windows Memory forensics. And you will learn to work with PowerShell scripting for forensic applications and Windows email forensics. Microsoft Azure and cloud forensics are discussed and you will learn how to extract from the cloud. By the end of the book you will know data-hiding techniques in Windows and learn about volatility and a Windows Registry cheat sheet.

What Will You Learn

  • Understand Windows architecture
  • Recover deleted files from Windows and the recycle bin
  • Use volatility and PassMark volatility workbench
  • Utilize Windows PowerShell scripting for forensic applications

Who This Book Is For

Windows administrators, forensics practitioners, and those wanting to enter the field of digital forensics

on
Desktop
Tablet
Mobile

More in Microsoft Programming