Mastering Windows Network Forensics and Investigation

Steven Anson, Steve Bunting9780470097625, 0470097620

* Details the techniques needed to thoroughly investigate, analyze, and document a criminal act on a Windows computer or network, including step-by-step coverage of how to fully investigate a Windows intrusion incident* Focuses on investigating criminal activity rather than inappropriate use of company networks and systems* Aimed at law enforcement personnel, prosecutors, and corporate investigators tasked with the investigation and prosecution of high technology crime* Also covers the emerging field of “live forensics,” in which investigators access live data on a computer, server, or network as opposed to performing investigations on unplugged machines or data files, since valuable evidence may be lost once the machine is unplugged”