Windows Registry Forensics: Advanced Digital Forensic Analysis of the Windows Registry

4.13 avg rating
( 30 ratings by Goodreads )
 
9781597495806: Windows Registry Forensics: Advanced Digital Forensic Analysis of the Windows Registry

Harlan Carvey brings readers an advanced book on Windows Registry. The first book of its kind EVER -- Windows Registry Forensics provides the background of the Registry to help develop an understanding of the binary structure of Registry hive files. Approaches to live response and analysis are included, and tools and techniques for postmortem analysis are discussed at length. Tools and techniques will be presented that take the analyst beyond the current use of viewers and into real analysis of data contained in the Registry.




  • Packed with real-world examples using freely available open source tools

  • Deep explanation and understanding of the Windows Registry - the most difficult part of Windows to analyze forensically

  • Includes a CD containing code and author-created tools discussed in the book

"synopsis" may belong to another edition of this title.

From the Back Cover:

Harlan Carvey brings you an advanced book on just the Windows Registry – the most difficult part of Windows to analyze forensically. Windows Registry Forensics provides the background of the Registry to developing an understanding of the binary structure of Registry hive files. Approaches to live response and analysis are included and tools and techniques for post-mortem analysis are discussed at length.

Tools and techniques will be presented that take the analyst beyond the current use of viewers and into real analysis of data contained in the Registry, and demonstrate the forensic value of the Registry.

  • Packed with real-world examples using freely available tools
  • Deep explanation and understanding of the Windows Registry
  • Includes a CD containing code and author-created tools discussed in the book

About the Author:

Harlan Carvey is a senior information security researcher with the Dell SecureWorks Counter Threat Unit - Special Ops (CTU-SO) team, where his efforts are focused on targeted threat hunting, response, and research. He continues to maintain a passion and focus in analyzing Windows systems, and in particular, the Windows Registry.

Harlan is an accomplished author, public speaker, and open source tool author. He dabbles in other activities, including home brewing and horseback riding. As a result, he has become quite adept at backing up and parking a horse trailer.

Harlan earned a bachelor’s degree in electrical engineering from the Virginia Military Institute, and a master’s degree in the same discipline from the Naval Postgraduate School. He served in the United States Marine Corps, achieving the rank of captain before departing the service. He resides in Northern Virginia with his family.

"About this title" may belong to another edition of this title.

Top Search Results from the AbeBooks Marketplace

1.

Carvey, Harlan
Published by Syngress (2011)
ISBN 10: 1597495808 ISBN 13: 9781597495806
New Paperback Quantity Available: 2
Seller:
Murray Media
(North Miami Beach, FL, U.S.A.)
Rating
[?]

Book Description Syngress, 2011. Paperback. Book Condition: New. Never used!. Bookseller Inventory # P111597495808

More Information About This Seller | Ask Bookseller a Question

Buy New
US$ 61.27
Convert Currency

Add to Basket

Shipping: US$ 1.99
Within U.S.A.
Destination, Rates & Speeds

2.

Harlan Carvey
Published by Syngress (2011)
ISBN 10: 1597495808 ISBN 13: 9781597495806
New Paperback First Edition Quantity Available: 1
Seller:
Irish Booksellers
(Rumford, ME, U.S.A.)
Rating
[?]

Book Description Syngress, 2011. Paperback. Book Condition: New. book. Bookseller Inventory # M1597495808

More Information About This Seller | Ask Bookseller a Question

Buy New
US$ 88.80
Convert Currency

Add to Basket

Shipping: FREE
Within U.S.A.
Destination, Rates & Speeds

3.

Carvey, Harlan
Published by Syngress Media Inc (2011)
ISBN 10: 1597495808 ISBN 13: 9781597495806
New Paperback Quantity Available: 1
Seller:
Revaluation Books
(Exeter, United Kingdom)
Rating
[?]

Book Description Syngress Media Inc, 2011. Paperback. Book Condition: Brand New. 1st edition. 248 pages. 9.20x7.50x0.80 inches. In Stock. Bookseller Inventory # zk1597495808

More Information About This Seller | Ask Bookseller a Question

Buy New
US$ 111.27
Convert Currency

Add to Basket

Shipping: US$ 7.99
From United Kingdom to U.S.A.
Destination, Rates & Speeds

4.

Harlan Carvey
Published by Syngress (2011)
ISBN 10: 1597495808 ISBN 13: 9781597495806
New Paperback Quantity Available: 1
Seller:
Ergodebooks
(RICHMOND, TX, U.S.A.)
Rating
[?]

Book Description Syngress, 2011. Paperback. Book Condition: New. 1. Bookseller Inventory # DADAX1597495808

More Information About This Seller | Ask Bookseller a Question

Buy New
US$ 129.11
Convert Currency

Add to Basket

Shipping: US$ 4.99
Within U.S.A.
Destination, Rates & Speeds