Placing the Suspect Behind the Keyboard

Foreword

I first met Brett Shavers several years ago at a training event that he had organized. At the time, Brett was a police officer—one of a handful among the local jurisdictions with the training and skill to take on digital forensic investigations. I had no idea then how often our paths would cross or how valuable his support could be. Brett has since become a leader in the digital forensic community of the Pacific North West, presiding over our local professional organization (www.ctin.org), running his own consulting company, writing papers and training materials, and maintaining websites devoted to Windows FE and RegRipper. In fact, that the world knows anything of my little internal project, Windows FE, has more to do with Brett’s ...