Praise for Windows Forensics and Incident Recovery

Windows Forensics and Incident Recovery doesn't just discuss forensics, it also includes tools for analysis and shows readers how to use them. I look forward to putting these tools through their paces, and I recommend Carvey's book as a terrific addition to the security professional's bookshelf.”

Warren G. Kruse II, Partner Computer Forensic Services, LLC

“This book is a good reference for the tools needed to prepare for, respond to, and confirm a Windows-based computer incident.”

Brian Carrier Digital forensics researcher

“This book provides a unique 'command-line centric' view of Microsoft and non-Microsoft tools that can be very helpful to folks responsible for security and system administration ...

Get Windows Forensics and Incident Recovery now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.