Windows Forensics and Incident Recovery

Windows Forensics and Incident Recovery, 9780321200983 (0321200985), Addison Wesley, 2004

If you're responsible for protecting Windows systems, firewalls and anti-virus aren't enough. You also need to master incident response, recovery, and auditing. Leading Windows security expert and instructor Harlan Carvey offers a start-to-finish guide to the subject: everything administrators must know to recognize and respond to virtually any attack.

Drawing on his widely acclaimed course, Carvey uses real-world examples to cover every significant incident response, recovery, and forensics technique. He delivers a complete incident response toolset that combines today's best open source and freeware tools, his own exclusive software and scripts, and step-by-step instructions for using them. This book's tools and techniques apply to every current and professional version of Windows: NT, 2000, XP, and Windows Server 2003. Coverage includes:

Developing a practical methodology for responding to potential attacks
Preparing your systems to prevent and detect incidents
Recognizing the signatures of an attack—in time to act
Uncovering attacks that evade detection by Event Viewer, Task Manager, and other Windows GUI tools
Using the Forensic Server Project to automate data collection during live investigations
Analyzing live forensics data in order to determine what occurred

Comments

Amazing Books

Data Quality (The Kluwer International Series on Advances in Database Systems Volume 23)

Springer, 2001

Data Quality provides an expose of research and practice in the data quality field for technically oriented readers. It is based on the research conducted at the MIT Total Data Quality Management (TDQM) program and work from other leading research institutions. This book is intended primarily for researchers, practitioners, educators and graduate...

Mechanical Logic in Three-Dimensional Space

Pan Stanford Publishing, 2013

The book explores how build a mechanical inferences by making use of arithmetic operations on a string of numbers representing statements. In this way logic is reduced to a branch of the combinatory calculus. It covers the field of traditional logic by showing that any kind of inference can be mechanically reduced to three-variables and...

The Art of Computer Virus Research and Defense

Addison Wesley, 2005

Symantec's chief antivirus researcher has written the definitive guide to contemporary virus threats, defense techniques, and analysis tools. Unlike most books on computer viruses, The Art of Computer Virus Research and Defense is a reference written strictly...

Computational Intelligence in Medical Imaging: Techniques and Applications

CRC Press, 2009

CI Techniques & Algorithms for a Variety of Medical Imaging Situations

Documents recent advances and stimulates further research

A compilation of the latest trends in the field, Computational Intelligence in Medical Imaging: Techniques and Applications explores how intelligent...

vi and Vim Editors Pocket Reference: Support for every text editing task

O'Reilly, 2011

Many Unix, Linux, and Mac OS X geeks enjoy using the powerful, platform-agnostic text editors vi and Vim, but there are far too many commands for anyone to remember. Author Arnold Robbins has chosen the most valuable commands for vi, Vim, and vi's main clones—vile, elvis, and nvi—and packed them into this...

The Elements of Statistical Learning: Data Mining, Inference, and Prediction, Second Edition (Springer Series in Statistics)

Springer, 2019

This book describes the important ideas in a variety of fields such as medicine, biology, finance, and marketing in a common conceptual framework. While the approach is statistical, the emphasis is on concepts rather than mathematics. Many examples are given, with a liberal use of colour graphics. It is a valuable resource...