Mastering Windows Network Forensics and Investigation

Pearson Scott Johnson Ryan Bunting Steve Anson Steven

ISBN 10: 1118163826 / ISBN 13: 9781118163825

Published by John Wiley & Sons, 2012

About this Item

pp. 696. Seller Inventory # 1837450177

Bibliographic Details

Title: Mastering Windows Network Forensics and ...

Publisher: John Wiley & Sons

Publication Date: 2012

Binding: Soft cover

Condition: New

Edition: 2nd Edition

About this title

Synopsis:

An authoritative guide to investigating high-technology crimes

Internet crime is seemingly ever on the rise, making the need for a comprehensive resource on how to investigate these crimes even more dire. This professional-level book--aimed at law enforcement personnel, prosecutors, and corporate investigators--provides you with the training you need in order to acquire the sophisticated skills and software solutions to stay one step ahead of computer criminals.

• Specifies the techniques needed to investigate, analyze, and document a criminal act on a Windows computer or network
• Places a special emphasis on how to thoroughly investigate criminal activity and now just perform the initial response
• Walks you through ways to present technically complicated material in simple terms that will hold up in court
• Features content fully updated for Windows Server 2008 R2 and Windows 7
• Covers the emerging field of Windows Mobile forensics

Also included is a classroom support package to ensure academic adoption, Mastering Windows Network Forensics and Investigation, 2nd Edition offers help for investigating high-technology crimes.

From the Back Cover:

Learn How to Conduct a Complete Computer Forensic Investigation

This professional guide teaches law enforcement personnel, prosecutors, and corporate investigators how to investigate crimes involving Windows computers and Windows networks. A top team of forensic experts details how and why Windows networks are targeted, shows you how to analyze computers and computer logs, explains chain of custody, and covers such tricky topics as how to gather accurate testimony from employees in politically charged corporate settings.

From recognizing high-tech criminal activity to presenting evidence in a way that juries and judges understand, this book thoroughly covers the range of skills, standards, and step-by-step procedures you need to conduct a criminal investigation in a Windows environment and make your evidence stand up in court.

Coverage includes:

• Responding to a reported computer intrusion
• Understanding how attackers exploit Windows networks
• Deciphering Windows ports, services, file systems, and the registry
• Examining suspects' computers and entire networks
• Analyzing event logs and data using live analysis techniques
• Exploring new complexities from cloud computing and virtualization

Investigate Computer Crimes in Windows Environments

Fully Updated for Windows Server 2008 and Windows 7

Discover How to Locate and Analyze an Attacker's Tools

Learn Detailed Windows Event Log Analysis