Executing Windows Command Line Investigations: While Ensuring Evidentiary Integrity

— —

Chet Hosmer (President, Python Forensics, Inc.<br>Assistant Professor, University of Arizona, Arizona, USA) Joshua Bartolomie (CEECS, CFCE, CISSP, CRISC, CSM, DFCP, Director of Cyber Security Architecture and Operations, Information Security Risk Management at Harris Corporation)

Executing Windows Command Line Investigations

While Ensuring Evidentiary Integrity

Chet Hosmer (President, Python Forensics, Inc.<br>Assistant Professor, University of Arizona, Arizona, USA), Joshua Bartolomie (CEECS, CFCE, CISSP, CRISC, CSM, DFCP, Director of Cyber Security Architecture and Operations, Information Security Risk Management at Harris Corporation), Rosanne Pelli (PMP, CompTIA Security+, Project Manager at Harris Corporation)

$89.95

Paperback

Not in-store but you can order this
How long will it take?

Availability Information

We source books from suppliers in Australia and overseas. For books we don't currently have in stock, the time it takes to get them from our suppliers can vary widely - from a few days to a few months - so we check each book with each supplier to determine the expected time it will take to be supplied to us.

We then advise you accordingly. If the time taken to get any book is too long for you, you can let us know and we will cancel or adjust your order, and refund as required.

To find out the anticipated arrival time for specific items prior to ordering, please contact us by phone or email:

Phone +61 2 9264 3111, or 1800 4 BOOKS (1800 4 26657) if outside Sydney:
option 1 Abbey's Bookshop (Crime, History, Science, Kids & more) • info@abbeys.com.au
option 2 Language Book Centre (ESL & Foreign Languages) • language@abbeys.com.au
option 3 Galaxy Bookshop (Sci-fi, Fantasy, Romance, Graphic Novels) • sf@galaxybooks.com.au

QTY:

English

Syngress Media,U.S.
14 June 2016

Microsoft Windows; Computer security; User interface design & usability

The book Executing Windows Command Line Investigations targets the needs of cyber security practitioners who focus on digital forensics and incident response. These are the individuals who are ultimately responsible for executing critical tasks such as incident response; forensic analysis and triage; damage assessments; espionage or other criminal investigations; malware analysis; and responding to human resource violations.

The authors lead readers through the importance of Windows CLI, as well as optimal configuration and usage. Readers will then learn the importance of maintaining evidentiary integrity, evidence volatility, and gain appropriate insight into methodologies that limit the potential of inadvertently destroying or otherwise altering evidence. Next, readers will be given an overview on how to use the proprietary software that accompanies the book as a download from the companion website. This software, called Proactive Incident Response Command Shell (PIRCS), developed by Harris Corporation provides an interface similar to that of a Windows CLI that automates evidentiary chain of custody and reduces human error and documentation gaps during incident response.

By: Chet Hosmer (President Python Forensics Inc.<br>Assistant Professor University of Arizona Arizona USA), Joshua Bartolomie (CEECS, CFCE, CISSP, CRISC, CSM, DFCP, Director of Cyber Security Architecture and Operations, Information Security Risk Management at Harris Corporation), Rosanne Pelli (PMP, CompTIA Security+, Project Manager at Harris Corporation)
Imprint: Syngress Media,U.S.
Country of Publication: United States
Dimensions: Height: 235mm, Width: 191mm, Spine: 15mm
Weight: 500g
ISBN: 9780128092682
ISBN 10: 0128092688
Pages: 228
Publication Date: 14 June 2016
Audience: Professional and scholarly , Undergraduate
Format: Paperback
Publisher's Status: Active

The Impact of Windows CLI Importance of Digital Evidence Integrity Windows CLI Configuration Operating the Proactive Incident Response Command Shell (PIRCS) Use Cases Future Use 3rd Party Windows CLI Tools

Chet Hosmer serves as an Assistant Professor of Practice at the University of Arizona in the Cyber Operations program, where he is teaching and researching the application of Python and Machine Learning to advanced cybersecurity challenges. Chet is also the founder of Python Forensics, Inc. a non-profit organization focused on the collaborative development of open-source investigative technologies using Python and other popular scripting languages. Chet has made numerous appearances to discuss emerging cyber threats including NPR, ABC News, Forbes, IEEE, The New York Times, The Washington Post, Government Computer News, Salon.com, and Wired Magazine. He has 7 published books with Elsevier and Apress that focus on data hiding, passive network defense strategies, Python Forensics, PowerShell, and IoT. Joshua Bartolomie (CISSP, CRISC, DFCP, CEECS, CFCE) has 20 years of technical and management experience within the information technology and cyber security domains. Joshua has contributed to and managed programs that range from teaching digital forensics to designing, implementing, and managing cutting edge Security Operations Centers and Incident Response Teams. Mr. Bartolomie is an active participant in multiple information sharing and collaborative consortiums and has presented at numerous cyber security forums, conferences, and venues. In his current role, Joshua is responsible for translating corporate business strategies, environmental conditions, infrastructure requirements, and industry best practices into strategic cyber security designs and architectural roadmaps. Joshua holds a Master’s Degree in Information Assurance from Norwich University and a Bachelor’s of Science in Digital and Computer Forensics from Champlain College. Ms. Rosanne Pelli, is a certified Project Management Professional (PMP) through the Project Management Institute (PMI) and CompTIA Security+ professional with Harris Corporation. She has over ten years of experience in the coordination, programmatic oversight and management of US government contracts as well as Harris’ Secure-U Training Program. During her years of experience, Ms. Pelli has assisted in the management and coordination of various government contracts that focused on the identification and analysis of emerging cyber threats; evaluation and transition of cyber security technologies for tactical use by the cyber security community; technical assistance to federal, state and local law enforcement communities; development and maintenance of a virtual cyber security training portal; and the development, coordination and execution of various national and international cyber security training initiatives.

Reviews for Executing Windows Command Line Investigations: While Ensuring Evidentiary Integrity

Executing Windows Command Line Investigations is a leading edge book that targets digital forensics investigations and incident response. The book clearly lays out the technical details of the Windows CLI so you can directly manage every aspect of cyber evidence acquisition and triage, while maintaining data evidence integrity and chain of custody. This is a must read for cyber security practitioners and students! - Joe Giordano, Utica College This book is an excellent reference for all levels of incident responders and covers essential techniques for responding to modern cyber security threats. - Mark Bilanski, Incident Response Manager