the field guide for conducting corporate computer investigations Steel, Chad 1975- creator text bibliography inu Indianapolis, IN Wiley Pub. c2006 2006 monographic eng

print

xvii, 382 p. : ill. ; 24 cm. Windows forensics -- Processing the digital crime scene -- Windows forensics basics -- Partitions and file systems -- Directory structure and special files -- The registry -- Forensic analysis -- Live system analysis -- Forensic duplication -- File system analysis -- Log file analysis -- Internet usage analysis -- Email investigations -- App. A. Sample chain of custody form -- App. B. Master boot record layout -- App. C. Partition types -- App. D. Fat32 boot sector layout -- App. E. NTFS boot sector layout -- App. F. NTFS metafiles -- App. G. Well-known SIDs -- Index. Chad Steel. Includes bibliographical references and index. n-us--- Security measures Computer crimes Investigation United States Methodology Computer networks Security measures Internet Security measures Computer security HV8079.C65 S84 2006 363.25/968 0470038624 (pbk.) 9780470038628 2006005530 http://www.loc.gov/catdir/toc/ecip069/2006005530.html http://www.loc.gov/catdir/enhancements/fy0741/2006005530-b.html http://www.loc.gov/catdir/enhancements/fy0741/2006005530-d.html http://www.loc.gov/catdir/toc/ecip069/2006005530.html http://www.loc.gov/catdir/enhancements/fy0741/2006005530-b.html http://www.loc.gov/catdir/enhancements/fy0741/2006005530-d.html DLC 060216 20200218160350.0 14269028