Windows forensics
Subtitle: the field guide for conducting corporate computer investigations
By: Chad Steel.
Publisher: Wiley Pub.; Wiley Pub., Inc.
Published: 2006
Place of publication: Indianapolis, IN
Language: eng
Number of pages: 382
ISBN-13: 9780470038628
Subjects: Microsoft Windows (Computer file) -- Security measures.; Computer crimes -- Investigation -- United States -- Methodology.; Computer networks -- Security measures.; Internet -- Security measures.; Computer security.
Description: xvii, 382 p. : 24 cm
Notes: Includes bibliographical references and index.
Table of contents: title: Windows forensics; title: Processing the digital crime scene; title: Windows forensics basics; title: Partitions and file systems; title: Directory structure and special files; title: The registry; title: Forensic analysis; title: Live system analysis; title: Forensic duplication; title: File system analysis; title: Log file analysis; title: Internet usage analysis; title: Email investigations; title: App. A. Sample chain of custody form; title: App. B. Master boot record layout; title: App. C. Partition types; title: App. D. Fat32 boot sector layout; title: App. E. NTFS boot sector layout; title: App. F. NTFS metafiles; title: App. G. Well-known SIDs; title: Index.