Windows Forensic Analysis Toolkit: Advanced Analysis Techniques for Windows 8

by Harlan Carvey

Harlan Carvey has updated Windows Forensic Analysis Toolkit , now in its fourth edition, to cover Windows 8 systems. The primary focus of this edition is on analyzing Windows 8 systems and processes using free and open-source tools. The book covers live response, file analysis, malware detection, timeline, and much more. Harlan Carvey presents real-life experiences from the trenches, making the material realistic and showing the why behind the how. The companion and toolkit materials are hosted online. This material consists of electronic printable checklists, cheat sheets, free custom tools, and walk-through demos. This edition complements Windows Forensic Analysis Toolkit, Second Edition , which focuses primarily on XP, and Windows Forensic Analysis Toolkit, Third Edition , which focuses primarily on Windows 7. This new fourth edition provides expanded coverage of many topics beyond Windows 8 as well, including new cradle-to-grave case examples, USB device analysis, hacking and intrusion cases, and "how would I do this" from Harlan's personal case files and questions he has received from readers. The fourth edition also includes an all-new chapter on reporting.

Genres: Technology

350 pages, Paperback

First published January 1, 2014

Reviews

[Brett Shavers · Rating 5 out of 5]

I was privileged to have been asked by Harlan Carvey to be a tech editor for his 4th Edition of WFA. The difficulty I had being a tech editor for this book was that I enjoyed reading it immensely, learned some new forensics techniques along the way, and thoroughly enjoyed it. Suggesting changes was difficult because the book is written in Harlan's style, to the point, practical, and easy to read.

Although I do not have a hard copy of the book yet (waiting for it...), the content of the book I read electronically is on par or better than Harlan's previous books, mostly because it full of new information, tips, and guidance on the current systems today.

I have always enjoyed Harlan's books since my first days in forensics and am truly honored to be considered as a tech editor for not only a very competent analyst, but someone who also is a good person in his personal and professional life.

[Ahmed Zakajew]

gggg

[مايا احمد · Rating 1 out of 5]

no thing