Purpose
The purpose of this book is to introduce the readers to a brave new world of technical information about their Microsoft Windows systems. In particular, this book focuses on forensics audits and incident recovery, or stated more plainly, what an administrator, investigator, consultant, or first responder should do and look for if they believe that a live Windows system has been compromised and how to interpret and analyze what they find.
Security incidents will occur without a doubt. The complexity of operating systems and applications has increased to meet the needs of the users, yet the effort and skill required to attack hundreds of systems at a time has dramatically decreased. Anyone with a connection to the Internet can download ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access