Windows Forensic Analysis Toolkit: Advanced Analysis Techniques for Windows 8

Windows Forensic Analysis Toolkit: Advanced Analysis Techniques for Windows 8

<p>Harlan Carvey has updated <i>Windows Forensic Analysis Toolkit</i>, now in its fourth edition, to cover Windows 8 systems. The primary focus of this edition is on analyzing Windows 8 systems and processes using free and open-source tools. The book covers live response, file analysis, malware detection, timeline, and much more. Harlan Carvey presents real-life experiences from the trenches, making the material realistic and showing the why behind the how. </p> <p>The companion and toolkit materials are hosted online. This material consists of electronic printable checklists, cheat sheets, free custom tools, and walk-through demos. This edition complements <i>Windows Forensic Analysis Toolkit, Second Edition</i>, which focuses primarily on XP, and <i>Windows Forensic Analysis Toolkit, Third Edition</i>, which focuses primarily on Windows 7.</p> <p>This new fourth edition provides expanded coverage of many topics beyond Windows 8 as well, including new cradle-to-grave case examples, USB device analysis, hacking and intrusion cases, and "how would I do this" from Harlan's personal case files and questions he has received from readers. The fourth edition also includes an all-new chapter on reporting. </p><ul><li>Complete coverage and examples of Windows 8 systems </li><li>Contains lessons from the field, case studies, and war stories </li><li>Companion online toolkit material, including electronic printable checklists, cheat sheets, custom tools, and walk-throughs</li></ul>