Praise for Windows Forensics and Incident Recovery

“Windows Forensics and Incident Recovery doesn't just discuss forensics, it also includes tools for analysis and shows readers how to use them. I look forward to putting these tools through their paces, and I recommend Carvey's book as a terrific addition to the security professional's bookshelf.”

—Warren G. Kruse II, Partner Computer Forensic Services, LLC

“This book is a good reference for the tools needed to prepare for, respond to, and confirm a Windows-based computer incident.”

—Brian Carrier Digital forensics researcher

“This book provides a unique 'command-line centric' view of Microsoft and non-Microsoft tools that can be very helpful to folks responsible for security and system administration on the Windows platform.”

—Vishwas Lele, principal architect Applied Information Sciences, Inc.

“Harlan Carvey's book serves as a great resource for investigators and systems administrators looking to peek under the hoods of their Windows systems.”

—Jason Chan, security consultant @stake

“Regardless of what you know already, you are guaranteed to learn something new about Windows incident response from this book.”

—Brian Behler, computer forensics and intrusion analyst/engineer

“Harlan Carvey's vast security and forensics experience shows through in all facets of this work. Many books have attempted to be the prescriptive guide to forensics on the Windows platform. This book not only attempts it, but it succeeds—with guidance to spare.”

—Rick Kingslan, Microsoft MVP West Corporation

“This book is the first to bring together into a single volume the topics of malicious code, incident response, and forensics on the Windows platform. Mr. Carvey's work should serve as a valuable reference for any Windows system administrator or security professional.”

—Jennifer Kolde, information security consultant, author, and instructor

“Harlan Carvey's book is a one-of-a-kind approach to do-it-yourself Windows forensics. With detailed and illustrative examples coupled with Harlan's renowned Perl scripts, this book certainly is a great find.”

—Mark Burnett, security consultant and author