Unlike other books, courses and training that expect an analyst to piece together individual instructions into a cohesive investigation,Investigating Windows Systemsprovides a walk-through of the analysis process, with descriptions of the thought process and analysis decisions along the way.

Investigating Windows Systems will not address topics which have been covered in other books, but will expect the reader to have some ability to discover the detailed usage of tools and to perform their own research. The focus of this volume is to provide a walk-through of the analysis process, with descriptions of the thought process and the analysis decisions made along the way.

A must-have guide for those in the field of digital forensic analysis and incident response.


Provides the reader with a detailed walk-through of the analysis process, with decision points along the way, assisting the user in understanding the resulting data
Coverage will include malware detection, user activity, and how to set up a testing environment

Written at a beginner to intermediate level for anyone engaging in the field of digital forensic analysis and incident response

不像其他书籍、课程和培训，期望分析员将个别指令拼凑成一个有凝聚力的调查，《调查Windows系统》提供了一个分析过程的演练，并描述了思考过程和沿途的分析决定。

调查Windows系统》不会涉及其他书中已经涉及的主题，但希望读者有一定的能力来发现工具的详细用法，并进行自己的研究。本卷的重点是提供分析过程的走马观花，并对思维过程和沿途的分析决定进行描述。

对于数字取证分析和事件响应领域的人来说，这是一本必备的指南。

为读者提供了分析过程的详细介绍，包括沿途的决策点，帮助用户理解所得到的数据。

覆盖范围包括恶意软件检测、用户活动以及如何建立一个测试环境

为从事数字取证分析和事件响应领域的任何人提供初级到中级水平的内容