Windows forensic analysis toolkit: advanced analysis techniques for Windows 8 (4th ed.)

摘要

Although this book is well written and easy to read, its title is misleading. While it is an update of the author's third edition (subtitled Advanced analysis techniques for Windows 7) it neither is a toolkit nor is it focused on Windows 8. It covers certain areas of forensic analysis on many different Windows operating systems, but the material on Windows 8 is sketchy at best. Some chapters barely mention Windows 8 at all.