Windows Forensics and Incident Recovery

Introduction

Many moons ago, back when I was in my initial military training, all of us (newly minted second lieutenant officer students) were given a stack of books to read as part of our professional military education. The idea was that we would read these books, think about and discuss the lessons in the books and thereby grow professionally. Some of the books include Attacks by Erwin Rommel (yes, THAT Rommel) and The Forgotten Soldier by Guy Sajer. One that I found particularly interesting was The Defense of Duffer's Drift^[2] by Ernest Swinton. This was the smallest of all of the books we received, and it looked like (and was) a quick read. No longer in print, the book began its life as a story written in 1905 by then-Captain (later Major ...