Windows Forensics Cookbook

Conventions

In this book, you will find a number of styles of text that distinguish between different kinds of information. Here are some examples of these styles, and an explanation of their meaning.

Code words in text, database table names, folder names, filenames, file extensions, path names, dummy URLs, user input, and Twitter handles are shown as follows: "So in our case, it's D:\Belkasoft Memory Forensics Test."

Any command-line input or output is written as follows:

volatility_2.6_win64_standalone.exe -f X:stuxnet.vmem--profile=WinXPSP3x86 malfind -p 868 --dump-dirX:Stuxnet

New terms and important words are shown in bold. Words that you see on the screen, in menus or dialog boxes for example, appear in the text like this: "The first ...