Windows forensics : the field guide for conducting corporate computer investigations / Chad Steel.

By:

Steel, Chad, 1975-

Material type:

TextPublication details: Indianapolis, IN : Wiley Pub., c2006.Description: xvii, 382 p. : ill. ; 24 cmISBN:

0470038624 (pbk.)
9780470038628

Subject(s):

DDC classification:

363.25/968 22

LOC classification:

HV8079.C65 S84 2006

Online resources:

Contents:

Windows forensics -- Processing the digital crime scene -- Windows forensics basics -- Partitions and file systems -- Directory structure and special files -- The registry -- Forensic analysis -- Live system analysis -- Forensic duplication -- File system analysis -- Log file analysis -- Internet usage analysis -- Email investigations -- App. A. Sample chain of custody form -- App. B. Master boot record layout -- App. C. Partition types -- App. D. Fat32 boot sector layout -- App. E. NTFS boot sector layout -- App. F. NTFS metafiles -- App. G. Well-known SIDs -- Index.

Tags from this library: No tags from this library for this title. Log in to add tags.

Average rating: 0.0 (0 votes)

Holdings
Cover image	Item type	Current library	Home library	Collection	Shelving location	Call number	Materials specified	Vol info	URL	Copy number	Status	Notes	Date due	Barcode	Item holds	Item hold queue priority	Course reserves
	Book	Karen				HV8079.C65 S84 2006 (Browse shelf(Opens below))				1	Available			2020-1611