eShop USA > Books > Windows Forensics and Incident Recovery (Addison-Wesley Microsoft Technology Series)
Windows Forensics and Incident Recovery (Addison-Wesley Microsoft Technology Series)
List Price: $59.99Our Price: $50.99 You Save: $9.00 (15%)Prices subject to change.
Availability: Usually ships in 24 hours
Save $5.00 when you spend $25.00 or more on Qualifying Items offered by Amazon.com. Enter code BMLSAVES at checkout.
Binding: Paperback
Dewey Decimal Number: 005.86
EAN: 9780321200983
ISBN: 0321200985
Label: Addison-Wesley Professional
Manufacturer: Addison-Wesley Professional
Number Of Items: 1
Number Of Pages: 480
Publication Date: July 31, 2004
Publisher: Addison-Wesley Professional
Studio: Addison-Wesley Professional
Related Items: Featured Listmania!
Customer Reviews
Average Rating: 
Rating:  - Over rated.
I'm surprised to see the rate of this book so high. I was expecting it to be much better and more updated. The tools that are used are not new, things that somebody in the security field knows and use for years. I was not happy also to realize that many pages include code listings of perl scripts.
Maybe a nice book for somebody who is starting now in the field of security nothing new for the rest.
Nicolas Krassas CISSP
Rating:  - Invaluable Resource For Any Windows Admin
About a year ago I was investigating a system to try and determine if it was attacked, as well as when and how if it had been. I wrote for help to a list that I am on and Harlan Carvey responded with detailed and useful information that helped me out.
I asked Carvey at the time if there were a book I could get that would help me learn that stuff and he told me that he didn't want to be cocky per se, but that there really wasn't and that I would have to wait until his book came out. Now ... Read More
Rating: - An Excellent and Informative Book
I am a nuts and bolts kind of guy and this book suits me to a tee. Harlan covers the topics thoroughly and has added to my knowledge of forensic methodology and shown me new techniques to discover information the many recent versions of the Windows operating system. He has done his homework, mixed it up with lots of coding examples, and even added some dream weaving to illustrate his points.
He lays the groundwork in chapters one, two, and three so that anyone reading the book will be sure ... Read More
Rating: - Invaluable Reference for Todays Windows Admins
I would strongly recommend this book to anyone that is looking at Windows incident response or Windows monitoring. This is the first computer book that I have read cover to cover in well over 5 years and I have bought a lot of computer books. From the beginning until the end you are bombarded with information that is useful and relevant to today's Windows management. Not only are you told about different tools but are shown how they are used and what benefit they have, not only in incident response but ... Read More
Rating: - Tools for the Microsoft Administrator
Windows Forensics and Incident Recovery is an invaluable resource for a Windows Administrator. The author points out correctly that an investigation into anomalous computer behavior is often cut short due to a lack of understanding what to look for and the time constraints that all IT departments work under. After presenting tools to reveal hidden processes and information, he presents a methodology to quickly and easily retrieve this information from a machine so that an informed decision as to whether patching, ... Read More
Related Categories:
| |
 |
![Spanish (Latin America) Level 3 Win/Mac Personal Edition [Old Version]](http://ecx.images-amazon.com/images/I/51faShQ4LEL._SL75_.jpg
)
