000 04384nam a22005655i 4500
001 979-8-8688-0193-8
003 DE-He213
005 20251030112241.0
007 cr nn 008mamaa
008 240529s2024 xxu| s |||| 0|eng d
020 _a9798868801938
_9979-8-8688-0193-8
024 7 _a10.1007/979-8-8688-0193-8
_2doi
050 4 _aQA76.76.M52
072 7 _aUMP
_2bicssc
072 7 _aCOM051380
_2bisacsh
072 7 _aUMP
_2thema
100 1 _aEasttom, Chuck.
_eauthor.
_4aut
_4http://id.loc.gov/vocabulary/relators/aut
_977764
245 1 0 _aWindows Forensics
_h[electronic resource] :
_bUnderstand Analysis Techniques for Your Windows /
_cby Chuck Easttom, William Butler, Jessica Phelan, Ramya Sai Bhagavatula, Sean Steuber, Karely Rodriguez, Victoria Indy Balkissoon, Zehra Naseer.
250 _a1st ed. 2024.
264 1 _aBerkeley, CA :
_bApress :
_bImprint: Apress,
_c2024.
300 _aXXIII, 470 p. 300 illus.
_bonline resource.
336 _atext
_btxt
_2rdacontent
337 _acomputer
_bc
_2rdamedia
338 _aonline resource
_bcr
_2rdacarrier
347 _atext file
_bPDF
_2rda
505 0 _aChapter 1: Introduction to Windows -- Chapter 2: Forensics Concepts -- Chapter 3: Creating Forensic Images Using OSForensics, FTK Imager, and Autopsy -- Chapter 4: Windows File Artifacts -- Chapter 5: Windows Registry Part 1 -- Chapter 6: Windows Registry Part 2 -- Chapter 7: Windows Shadow Copy -- Chapter 8: Windows Memory Forensics -- Chapter 9: PowerShell Forensics -- Chapter 10: Web Browser Forensics -- Chapter 11: Windows Email Forensics -- Chapter 12: Microsoft Azure and Cloud Forensics -- Chapter 13: Data-Hiding Techniques in Windows -- Appendix A: Volatility Cheat Sheet -- Appendix B: Windows Registry Cheat Sheet.
520 _aThis book is your comprehensive guide to Windows forensics. It covers the process of conducting or performing a forensic investigation of systems that run on Windows operating systems. It also includes analysis of incident response, recovery, and auditing of equipment used in executing any criminal activity. The book covers Windows registry, architecture, and systems as well as forensic techniques, along with coverage of how to write reports, legal standards, and how to testify. It starts with an introduction to Windows followed by forensic concepts and methods of creating forensic images. You will learn Windows file artefacts along with Windows Registry and Windows Memory forensics. And you will learn to work with PowerShell scripting for forensic applications and Windows email forensics. Microsoft Azure and cloud forensics are discussed and you will learn how to extract from the cloud. By the end of the book you will know data-hiding techniques in Windows and learn about volatility and a Windows Registry cheat sheet. What Will You Learn Understand Windows architecture Recover deleted files from Windows and the recycle bin Use volatility and PassMark volatility workbench Utilize Windows PowerShell scripting for forensic applications.
650 0 _aMicrosoft software.
650 0 _aMicrosoft .NET Framework.
650 1 4 _aMicrosoft.
700 1 _aButler, William.
_eauthor.
_4aut
_4http://id.loc.gov/vocabulary/relators/aut
_977765
700 1 _aPhelan, Jessica.
_eauthor.
_4aut
_4http://id.loc.gov/vocabulary/relators/aut
_977766
700 1 _aSai Bhagavatula, Ramya.
_eauthor.
_4aut
_4http://id.loc.gov/vocabulary/relators/aut
_977767
700 1 _aSteuber, Sean.
_eauthor.
_4aut
_4http://id.loc.gov/vocabulary/relators/aut
_977768
700 1 _aRodriguez, Karely.
_eauthor.
_4aut
_4http://id.loc.gov/vocabulary/relators/aut
_977769
700 1 _aIndy Balkissoon, Victoria.
_eauthor.
_4aut
_4http://id.loc.gov/vocabulary/relators/aut
_977770
700 1 _aNaseer, Zehra.
_eauthor.
_4aut
_4http://id.loc.gov/vocabulary/relators/aut
_977771
710 2 _aSpringerLink (Online service)
773 0 _tSpringer Nature eBook
776 0 8 _iPrinted edition:
_z9798868801921
776 0 8 _iPrinted edition:
_z9798868801945
776 0 8 _iPrinted edition:
_z9798868805653
856 4 0 _uhttps://doi.org/10.1007/979-8-8688-0193-8
912 _aZDB-2-CWD
912 _aZDB-2-SXPC
999 _c60262
_d60262