Windows Forensic Analysis Toolkit

Advanced Analysis Techniques for Windows 8

Harlan Carvey (DFIR analyst, presenter, and open-source tool author)

$89.95

Paperback

Not in-store but you can order this
How long will it take?

Availability Information

We source books from suppliers in Australia and overseas. For books we don't currently have in stock, the time it takes to get them from our suppliers can vary widely - from a few days to a few months - so we check each book with each supplier to determine the expected time it will take to be supplied to us.

We then advise you accordingly. If the time taken to get any book is too long for you, you can let us know and we will cancel or adjust your order, and refund as required.

To find out the anticipated arrival time for specific items prior to ordering, please contact us by phone or email:

Phone +61 2 9264 3111, or 1800 4 BOOKS (1800 4 26657) if outside Sydney:
option 1 Abbey's Bookshop (Crime, History, Science, Kids & more) • info@abbeys.com.au
option 2 Language Book Centre (ESL & Foreign Languages) • language@abbeys.com.au
option 3 Galaxy Bookshop (Sci-fi, Fantasy, Romance, Graphic Novels) • sf@galaxybooks.com.au

QTY:

English

Syngress Media,U.S.
08 May 2014

Microsoft Windows; Computer security

"Harlan Carvey has updated Windows Forensic Analysis Toolkit, now in its fourth edition, to cover Windows 8 systems. The primary focus of this edition is on analyzing Windows 8 systems and processes using free and open-source tools. The book covers live response, file analysis, malware detection, timeline, and much more. Harlan Carvey presents real-life experiences from the trenches, making the material realistic and showing the why behind the how.

The companion and toolkit materials are hosted online. This material consists of electronic printable checklists, cheat sheets, free custom tools, and walk-through demos. This edition complements Windows Forensic Analysis Toolkit, Second Edition, which focuses primarily on XP, and Windows Forensic Analysis Toolkit, Third Edition, which focuses primarily on Windows 7.

This new fourth edition provides expanded coverage of many topics beyond Windows 8 as well, including new cradle-to-grave case examples, USB device analysis, hacking and intrusion cases, and ""how would I do this"" from Harlan's personal case files and questions he has received from readers. The fourth edition also includes an all-new chapter on reporting."

By: Harlan Carvey (DFIR analyst presenter and open-source tool author)
Imprint: Syngress Media,U.S.
Country of Publication: United States
Edition: 4th edition
Dimensions: Height: 235mm, Width: 191mm, Spine: 20mm
Weight: 720g
ISBN: 9780124171572
ISBN 10: 0124171575
Pages: 350
Publication Date: 08 May 2014
Audience: Professional and scholarly , Undergraduate
Format: Paperback
Publisher's Status: Active

Analysis Concepts Immediate Response Volume Shadow Copies File Analysis Registry Analysis Malware Detection Timeline Analysis Application Analysis Reporting

Mr. Carvey is a digital forensics and incident response analyst with past experience in vulnerability assessments, as well as some limited pen testing. He conducts research into digital forensic analysis of Window systems, identifying and parsing various digital artifacts from those systems, and has developed several innovative tools and investigative processes specific to the digital forensics analysis field. He is the developer of RegRipper, a widely-used tool for Windows Registry parsing and analysis. Mr. Carvey has developed and taught several courses, including Windows Forensics, Registry, and Timeline Analysis.

Reviews for Windows Forensic Analysis Toolkit: Advanced Analysis Techniques for Windows 8

"""... this book is well written and easy to read…has some material of interest to experts…""--Computing Reviews, Windows Forensic Analysis Toolkit, 4th Edition ""...technical detail is extensive here and those realworld examples mentioned earlier are worked through in intricate detail. You will definitely want to try this at home…"" -Network Security, Nov 2014"