Mastering Windows Network Forensics and Investigation

Description

This comprehensive guide provides you with the training you need to arm yourself against phishing, bank fraud, unlawful hacking, and other computer crimes. Two seasoned law enforcement professionals discuss everything from recognizing high-tech criminal activity and collecting evidence to presenting it in a way that judges and juries can understand. They cover the range of skills, standards, and step-by-step procedures you’ll need to conduct a criminal investigation in a Windows environment and make your evidence stand up in court.

CONTENTS:

Introduction.

Part 1: Understanding and Exploiting Windows Networks.

Chapter 1: Network Investigation Overview.

Chapter 2: The Microsoft Network Structure.

Chapter 3: Beyond the Windows GUI.

Chapter 4: Windows Password Issues.

Chapter 5: Windows Ports and Services.

Part 2: Analyzing the Computer.

Chapter 6: Live-Analysis Techniques.

Chapter 7: Windows File Systems.

Chapter 8: The Registry Structure.

Chapter 9: Registry Evidence.

Chapter 10: Tool Analysis.

Part 3: Analyzing the Logs.

Chapter 11: Text-Based Logs.

Chapter 12: Windows Event Logs.

Chapter 13: Logon and Account Logon Events.

Chapter 14: Other Audit Events.

Chapter 15: Forensic Analysis of Event Logs.

Chapter 16: Presenting the Results.

Appendix A: The Bottom Line.

Index.