rdf-syntax-grammar
mods:
  schema location: http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-2.xsd
  title info:
    title: Windows Forensic Analysis Toolkit, 3rd Edition
  name:
    name part: Carvey, Harlan
    role:
      role term: creator
    role:
      role term: author.
  name:
    name part: Safari, an O'Reilly Media Company
  type of resource: text
  genre: Electronic books.
  origin info:
    place:
      place term: xx
    date issued: 2012
    edition: 3rd edition.
    issuance: monographic
  language:
    language term: eng
  physical description:
    form: remote
    extent: 1 online resource (296 pages)
  abstract: Windows Forensic Analysis Toolkit: Advanced Analysis Techniques for Windows 7 provides an overview of live and postmortem response collection and analysis methodologies for Windows 7. It considers the core investigative and analysis concepts that are critical to the work of professionals within the digital forensic analysis community, as well as the need for immediate response once an incident has been identified. Organized into eight chapters, the book discusses Volume Shadow Copies (VSCs) in the context of digital forensics and explains how analysts can access the wealth of information available in VSCs without interacting with the live system or purchasing expensive solutions. It also describes files and data structures that are new to Windows 7 (or Vista), Windows Registry Forensics, how the presence of malware within an image acquired from a Windows system can be detected, the idea of timeline analysis as applied to digital forensic analysis, and concepts and techniques that are often associated with dynamic malware analysis. Also included are several tools written in the Perl scripting language, accompanied by Windows executables. This book will prove useful to digital forensic analysts, incident responders, law enforcement officers, students, researchers, system administrators, hobbyists, or anyone with an interest in digital forensic analysis of Windows 7 systems. Timely 3e of a Syngress digital forensic bestseller Updated to cover Windows 7 systems, the newest Windows version New online companion website houses checklists, cheat sheets, free tools, and demos
  note: Carvey, Harlan.
  note: Electronic resource.
  note: Electronic reproduction. Boston, MA : Safari, Available via World Wide Web. 2012.
  note: Mode of access: World Wide Web.
  identifier: 9781597497282
  identifier: 9781597497275
  identifier: https://proxy.library.tamu.edu/login
  record info:
    record creation date: 070513
    record change date: 20260128223746.5
    record identifier: in00004232765