Windows Details

Before delving deeply into Windows forensics, it is a good idea to get a better idea of the operating system itself. In this section, you learn about the history of Windows and its structure. This gives you a context within which to learn Windows forensics. For deeper coverage of Windows internals, refer to the book Windows Sysinternals Administrator’s Reference by Mark E. Russinovich and Aaron Margosis.

Windows History

Windows became mainstream with the release of version 3.1 in 1992. At that time, Windows was a graphical user interface, and not really an operating system. The operating system was Disk Operating System (DOS). Windows provided a visual interface for interacting with the operating system by means of mouse ...

Get System Forensics, Investigation, and Response, 3rd Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.