Chapter 16

Presenting the Results

Thus far, we have covered the technical aspects of the Windows network investigation. As you will quickly find, you may have the world’s absolute best technical skills, but if you can’t render your findings into a report that both presents well and reads well, your skills will be nearly useless in the prosecutorial phase. That may sound very harsh, but it is also very true. Thus, in this chapter, we’ll cover the fine nuances of taking that technical information that you compiled after hours of analysis and rendering it into a professional report. The report will retain your technical findings and information, but it will have a friendly and readable overlay. In addition, we’ll discuss some tips and tricks that ...

Get Mastering Windows Network Forensics and Investigation, 2nd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.