Windows Forensic Analysis Toolkit -

. .

Résumé :
4th edition. Focusses on analysing Windows 8 systems and processes using free and open-source tools.

Biographie:
Mr. Carvey is a digital forensics and incident response analyst with past experience in vulnerability assessments, as well as some limited pen testing. He conducts research into digital forensic analysis of Window systems, identifying and parsing various digital artifacts from those systems, and has developed several innovative tools and investigative processes specific to the digital forensics analysis field. He is the developer of RegRipper, a widely-used tool for Windows Registry parsing and analysis. Mr. Carvey has developed and taught several courses, including Windows Forensics, Registry, and Timeline Analysis.

Sommaire:

1. Analysis Concepts
2. Immediate Response
3. Volume Shadow Copies
4. File Analysis
5. Registry Analysis
6. Malware Detection
7. Timeline Analysis
8. Application Analysis
9. Reporting