Windows Forensics and Incident Recovery

Searching

Two of the web sites I frequent most often when conducting research into the darker depths of Windows security are the Google.com (http://www.google.com) search engine and the Microsoft Advanced Search site (http://search.microsoft.com/search/search.aspx?st=a&View=en-us). Using the Microsoft Advanced Search site, you can find a great deal of information about Microsoft products, API calls, security bulletins, etc.

However, searching the Microsoft KnowledgeBase (KB) can at times be problematic and confusing, so I will turn to Google to get a head start on the search. Google will often return pages from within the Microsoft web structure that the MS Advanced Search site did not turn up. I also use Google for my initial searches when I'm ...