Aucun appareil Kindle n'est requis. Téléchargez l'une des applis Kindle gratuites et commencez à lire les livres Kindle sur votre smartphone, tablette ou ordinateur.

  • Apple
  • Android
  • Windows Phone
  • Android

Pour obtenir l'appli gratuite, saisissez votre adresse e-mail ou numéro de téléphone mobile.

Prix Kindle : EUR 39,84

EUR 17,08 (30%)

TVA incluse

Ces promotions seront appliquées à cet article :

Certaines promotions sont cumulables avec d'autres offres promotionnelles, d'autres non. Pour en savoir plus, veuillez vous référer aux conditions générales de ces promotions.

Envoyer sur votre Kindle ou un autre appareil

Envoyer sur votre Kindle ou un autre appareil

Repliez vers l'arrière Repliez vers l'avant
Narration Audible Lecture en cours... Interrompu   Vous écoutez un extrait de la narration Audible pour ce livre Kindle.
En savoir plus

Windows Forensic Analysis Toolkit: Advanced Analysis Techniques for Windows 8 Format Kindle

Voir les formats et éditions Masquer les autres formats et éditions
Prix Amazon
Neuf à partir de Occasion à partir de
Format Kindle
"Veuillez réessayer"
EUR 39,84

Longueur : 346 pages Langue : Anglais

Ponts de mai 2016 Promo Ponts de mai 2016

Descriptions du produit

Revue de presse

"... this book is well written and easy to read…has some material of interest to experts…"--Computing Reviews, Windows Forensic Analysis Toolkit, 4th Edition

"...technical detail is extensive here and those realworld examples mentioned earlier are worked through in intricate detail. You will definitely want to try this at home…" -Network Security, Nov 2014

Présentation de l'éditeur

Harlan Carvey has updated Windows Forensic Analysis Toolkit, now in its fourth edition, to cover Windows 8 systems. The primary focus of this edition is on analyzing Windows 8 systems and processes using free and open-source tools. The book covers live response, file analysis, malware detection, timeline, and much more. Harlan Carvey presents real-life experiences from the trenches, making the material realistic and showing the why behind the how.

The companion and toolkit materials are hosted online. This material consists of electronic printable checklists, cheat sheets, free custom tools, and walk-through demos. This edition complements Windows Forensic Analysis Toolkit, Second Edition, which focuses primarily on XP, and Windows Forensic Analysis Toolkit, Third Edition, which focuses primarily on Windows 7.

This new fourth edition provides expanded coverage of many topics beyond Windows 8 as well, including new cradle-to-grave case examples, USB device analysis, hacking and intrusion cases, and "how would I do this" from Harlan's personal case files and questions he has received from readers. The fourth edition also includes an all-new chapter on reporting.

  • Complete coverage and examples of Windows 8 systems
  • Contains lessons from the field, case studies, and war stories
  • Companion online toolkit material, including electronic printable checklists, cheat sheets, custom tools, and walk-throughs

Détails sur le produit

  • Format : Format Kindle
  • Taille du fichier : 3144 KB
  • Nombre de pages de l'édition imprimée : 346 pages
  • Editeur : Syngress; Édition : 4 (11 mars 2014)
  • Vendu par : Amazon Media EU S.à r.l.
  • Langue : Anglais
  • ASIN: B00J997LYQ
  • Synthèse vocale : Activée
  • X-Ray :
  • Word Wise: Non activé
  • Composition améliorée: Non activé
  • Moyenne des commentaires client : Soyez la première personne à écrire un commentaire sur cet article
  • Classement des meilleures ventes d'Amazon: n°213.196 dans la Boutique Kindle (Voir le Top 100 dans la Boutique Kindle)
  •  Voulez-vous faire un commentaire sur des images ou nous signaler un prix inférieur ?

Commentaires en ligne

Il n'y a pas encore de commentaires clients sur
5 étoiles
4 étoiles
3 étoiles
2 étoiles
1 étoiles

Commentaires client les plus utiles sur (beta) HASH(0x943e2a14) étoiles sur 5 12 commentaires
23 internautes sur 26 ont trouvé ce commentaire utile 
HASH(0x945b299c) étoiles sur 5 Disappointing Update to Windows Forensic Analysis 30 avril 2014
Par Rob Lee - Publié sur
Format: Format Kindle Achat vérifié
I am a fan of Harlan's books and we even carry them in the SANS bookstore at conference events as recommended reading by SANS instructors. His last book "Windows Forensic Analysis: Advanced Analysis Techniques for Windows 7" was a wonderful rewrite and included many new artifacts found on Windows 7 including jumplists, volume shadow copy, and many new registry keys.

This new book, is basically a reprint of his previous book based on Windows 7 with some brief mentions of Windows 8 artifacts. Harlan does mention this fact even in the book, but I feel the title is a bit misleading especially if you have a copy of his previous book.

If you have already purchased his 3rd edition book, I would pass on this book until more Windows 8 artifacts are detailed in full. Having read the book in full including the last two new chapters, it does include some brief new artifacts for Windows 8, but not enough to warrant spending the money to update your library at this point.

The book is great if the majority of your analysis is on Windows 7 systems. If you don't have a copy of the 3rd edition, then this book is a great addition to your forensics library. However, due the the misleading title "Advanced Analysis Techniques for Windows 8," I cannot rate the version of the book any higher.
3 internautes sur 3 ont trouvé ce commentaire utile 
HASH(0x948f3aa4) étoiles sur 5 Should be required reading for Forensic Examiners 20 mai 2014
Par Mari DeGrazia - Publié sur
Format: Broché
This book is well written, full of tips, and teaches the methodology of forensic examinations rather than just “go look here for this artifact”. Case in point is the Timeline chapter. This chapter does a great job of explaining the benefits of creating a timeline, and even walks the reader through the process using a Windows XP image.

The chapter on report writing was extremely helpful. In my experience, this is one area that many examiners may struggle with, because without a way to communicate the findings, the analysis is for not. This chapter not only covers the report writing process with examples, but also covers how to take detailed case notes. Although I have been writing reports for a while, there were still quite a few “ah ha” moments for me.

If you have any of his previous books, and are wondering if the new edition is worth the extra expense and time, I would say a resounding “Yes”. There is new content such as the Correlating Artifacts chapter and the Reports chapter. It has also been updated with some real life case examples that help drive home the points. If you’re new to Harlan’s series, I think this book is a great place to start. In addition to the newer operating systems, this book also covers XP, Sever 2003 and Vista.

It may also be a minor point, but I also like that fact that Harlan uses the pronoun “she” and not always “he” when talking about examiners.

I do have to say that Windows Forensics Analysis 2E is still one of my favorites, but that is probably because it was one of my first forensic books and has all my notes still in it :-)
1 internautes sur 1 ont trouvé ce commentaire utile 
HASH(0x944a824c) étoiles sur 5 "One Must Have" for Forensics Professionals - Windows Forensics Analysis Toolkit - by Harlan Carvey CISSP 31 octobre 2014
Par Dr. Larry Leibrock - Publié sur
Format: Broché Achat vérifié
I must state at the onset - This is a great digital forensics book.
This book as both an knowledge-builder and go-to desk-reference is a formidable and useful work.

It is very well written and well attributed. If i had to take one book about Windows 8 with me to Bezerkistan in order to complete an WIN 8 digital forensics mission. This Windows Forensics Analysis Tool Kit - is it.

I admire Harlan's technical forensics skills, understanding about limitations the forensics practice and his excellence in writing. This is a "must have" for digital forensics professionals. If you are in the digital forensics - business - get this book - read it - use it.
1 internautes sur 1 ont trouvé ce commentaire utile 
HASH(0x953d2558) étoiles sur 5 Excellent 10 septembre 2014
Par BB - Publié sur
Format: Broché Achat vérifié
Excellent book! This should be on every DFIR consultants bookshelf.
5 internautes sur 8 ont trouvé ce commentaire utile 
HASH(0x944a9168) étoiles sur 5 It's Harlan's latest book. What else do you need to know? 21 avril 2014
Par Brett Shavers - Publié sur
Format: Broché
Without reading any reviews, those analysts who buy Harlan’s books will keep buying his books with the full expectation of having a well-written (as in easy-to-read) book on Windows OS forensics. There is no need to read any further in this review if you fit in this category. This is Harlan’s new book. That is all you really need to know. But if you just want my opinion, read on…

This book is not "Windows 8 Forensics". And it's not really a "Windows Forensics Analysis Updated" either. It's a book on Windows OS forensics and covers a lot. Yes, the registry is covered here even through Harlan's registry book is still current. It's all here and like I mentioned, it's Harlan's latest book, so if you have anything to do with Windows OS forensics, this book has your name on it.

I have to say that Harlan asked me to be the tech editor, which I am still humbled and flattered to have been asked. It is a tough task to edit someone's work when much of the information is hot off the press, still in research mode, and just plain eye-opening fresh. But I found it to be an enjoyable experience being able to test Harlan's research on my own before the ink was dry (so to speak).

One key point I want to share from the book, is that sharing information is a strong concept that Harlan tries to get across. Without sharing, you'll never know what you don't know (because no one will ever tell you). Lots of information is shared in this book, you will have fun reading it.

I have a longer review on my blog ([...]) for more opinionated discussion...but in short, if you have looked in the registry or made timelines of user activity or captured live memory lately, you most certainly will benefit from this book. And as I always believed, if I can get one good piece of information out of a book or class that saves me hours (days or weeks!) of work, then my and money was well spent. This book is money well spent.
Ces commentaires ont-ils été utiles ? Dites-le-nous

Discussions entre clients