<?xml version="1.0" encoding="UTF-8"?>
<mods xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://www.loc.gov/mods/v3" version="3.1" xsi:schemaLocation="http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-1.xsd">
  <titleInfo>
    <title>Windows forensic analysis :(Include CD)</title>
    <subTitle>DVD toolkit</subTitle>
  </titleInfo>
  <name type="personal">
    <namePart>Carvey, Harlan A.</namePart>
    <role>
      <roleTerm authority="marcrelator" type="text">creator</roleTerm>
    </role>
  </name>
  <typeOfResource/>
  <originInfo>
    <place>
      <placeTerm type="text">Burlington, MA</placeTerm>
    </place>
    <publisher>Syngress Pub.</publisher>
    <dateIssued>c2009</dateIssued>
    <issuance/>
  </originInfo>
  <physicalDescription>
    <extent>xxvi, 482 p. : ill. ; 23 cm. + 1 DVD (4 3/4 in.)</extent>
  </physicalDescription>
  <tableOfContents>Collecting Volatile Data (Page-1), Data Analysis (Page-63), Windows Memory Analysis (Page-89), Registry Analysis (Page-157), File Analysis (Page-253), Executable File Analysis (Page-337), Root kits And Root kit Detection (Page-385), Tying It All Together (Page-409), Performing Analysis On A Budget (Page-437).</tableOfContents>
  <note type="statement of responsibility">Harlan Carvey.</note>
  <subject authority="lcsh">
    <topic>Computer crimes</topic>
    <topic>Investigation</topic>
    <geographic>United States</geographic>
    <topic>Methodology</topic>
  </subject>
  <subject authority="lcsh">
    <topic>Computer networks</topic>
    <topic>Security measures</topic>
  </subject>
  <subject authority="lcsh">
    <topic>Computer security</topic>
  </subject>
  <subject authority="lcsh">
    <topic>Internet</topic>
    <topic>Security measures</topic>
  </subject>
  <subject>
    <geographic>(Include CD)</geographic>
  </subject>
  <classification authority="ddc">363.250968,CAR</classification>
  <identifier type="isbn">159749156X (pbk.)</identifier>
  <identifier type="isbn">9781597494229</identifier>
  <identifier type="lccn">2007274573</identifier>
  <identifier type="uri">http://www.loc.gov/catdir/enhancements/fy0729/2007274573-d.html</identifier>
  <location>
    <url displayLabel="Publisher description">http://www.loc.gov/catdir/enhancements/fy0729/2007274573-d.html</url>
  </location>
  <recordInfo>
    <recordContentSource authority="marcorg"/>
    <recordChangeDate encoding="iso8601">20240105185319.0</recordChangeDate>
  </recordInfo>
</mods>
