Practical Windows Forensics

Table of Contents

1. Foundations and principles of Digital Forensics
2. Incident Response and live analysis
3. Volatile Data Acquisition
4. Non volatile data collection
5. Timeline
6. FS analysis and data recovery
7. Registry analysis
8. System Logs analysis
9. Windows files
10. Browsers and Email investigations
11. Memory forensics
12. Network forensics
13. Appendix A: Building Forensic Analyst Environment
14. Appendix B . Exercises solutions