Windows Registry Forensics, 2nd Edition

Preface

I am not an expert. I don’t know everything. In particular, I do not and have never claimed to be an expert at analyzing Windows systems nor in analyzing the Windows Registry. What I have done is taken all that stuff I’ve got written down over the years, in different places, as well as stuff I’ve found online, stuff I’ve found after running malware in a VM and creating a timeline, etc., and put it into what I thought would be a logical structure. I then decided to call some of this stuff “chapters,” and I sent them to Mari to review and tech edit. She sent them back, I looked at her comments, decided that she was right in most cases, and sent the chapters into Syngress. They made it into a book. That’s a process, and it doesn’t make ...