sybex.com

Forensics

Mastering Windows Network Forensics and Investigation

Steven Anson, Steve Bunting

ISBN: 978-0-470-09762-5

Paperback

552 pages

April 2007

If you are an instructor, you may request an evaluation copy for this title.

Find supplements, online resources, and technology solutions for this title onWiley's Higher Education Site

US $59.99

Add to Cart

Residents outside the United States can purchase books through our International Distributors.

Table of Contents

Introduction.

Part 1: Understanding and Exploiting Windows Networks.

Chapter 1: Network Investigation Overview.

Chapter 2: The Microsoft Network Structure.

Chapter 3: Beyond the Windows GUI.

Chapter 4: Windows Password Issues.

Chapter 5: Windows Ports and Services.

Part 2: Analyzing the Computer.

Chapter 6: Live-Analysis Techniques.

Chapter 7: Windows File Systems.

Chapter 8: The Registry Structure.

Chapter 9: Registry Evidence.

Chapter 10: Tool Analysis.

Part 3: Analyzing the Logs.

Chapter 11: Text-Based Logs.

Chapter 12: Windows Event Logs.

Chapter 13: Logon and Account Logon Events.

Chapter 14: Other Audit Events.

Chapter 15: Forensic Analysis of Event Logs.

Chapter 16: Presenting the Results.

Appendix A: The Bottom Line.

Index.

Printer-ready version