02235cam a22004094a 4500 7215 7215 14269028 OSt 20200218160350.0 060216s2006 inua b 001 0 eng 2006005530 0470038624 (pbk.) 9780470038628 (OCoLC)ocm64390409 (OCoLC)64390409 DLC DLC BAKER C#P YDXCP OCLCQ BTCTA DLC pcc n-us--- HV8079.C65 S84 2006 363.25/968 22 Steel, Chad, 1975- Windows forensics : the field guide for conducting corporate computer investigations / Chad Steel. Indianapolis, IN : Wiley Pub., c2006. xvii, 382 p. : ill. ; 24 cm. Includes bibliographical references and index. Windows forensics -- Processing the digital crime scene -- Windows forensics basics -- Partitions and file systems -- Directory structure and special files -- The registry -- Forensic analysis -- Live system analysis -- Forensic duplication -- File system analysis -- Log file analysis -- Internet usage analysis -- Email investigations -- App. A. Sample chain of custody form -- App. B. Master boot record layout -- App. C. Partition types -- App. D. Fat32 boot sector layout -- App. E. NTFS boot sector layout -- App. F. NTFS metafiles -- App. G. Well-known SIDs -- Index. Microsoft Windows (Computer file) Security measures. Computer crimes Investigation United States Methodology. Computer networks Security measures. Internet Security measures. Computer security. Table of contents only http://www.loc.gov/catdir/toc/ecip069/2006005530.html Contributor biographical information http://www.loc.gov/catdir/enhancements/fy0741/2006005530-b.html Publisher description http://www.loc.gov/catdir/enhancements/fy0741/2006005530-d.html 7 cbc orignew 1 ecip 20 y-gencatlg lcc MON 0 0 lcc 0 0 001 001 2020-02-18 DONATED BY KENYATTA UNIVERSITY 0 HV8079.C65 S84 2006 2020-1611 2020-02-18 00:00:00 1 2020-02-18 MON