February 2026
Intermediate to advanced
456 pages
17h 3m
English
Before delving deeply into Windows forensics, it is a good idea to get a better idea of the operating system itself. In this section, you learn about the history of Windows and its structure. This gives you a context within which to learn Windows forensics. For deeper coverage of Windows internals, refer to the book Windows Sysinternals Administrator’s Reference, started by Mark E. Russinovich and Aaron Margosis in 2011. The latest edition (7e) is now released as two parts. Windows Internals, Part 1 is by Pavel Yosifovich, Alex Ionescu, Mark Russinovich and David Solomon. Windows Internals, Part 2 is authored by Andrea Allievi, Alex Ionescu, Mark Russinovich, and David Solomon.
The first version of Windows to ...
Read now
Unlock full access