Mastering Windows Network Forensics and InvestigationISBN: 978-0-470-09762-5
Paperback
552 pages
April 2007
This title is out-of-print and not currently available for purchase from this site.
|
- A focus on investigating criminal activity and not simply inappropriate use of company networks and systems
- Guidance that enables students to present this technically complicated material in simple terms with language and analogies that prosecutors, judges, and juries can readily understand.
- Coverage of the emerging field of "live forensics," where investigators examine a computer, server, or network while it is still running to obtain evidence. (The standard practice has been to perform investigations on unplugged machines or data files that have been seized and taken back to the lab. However, once the machine is unplugged, valuable evidence may be lost.)