2nd Ed. — Syngress, 2016. — 207 p. — ISBN: 9780128032916, EISBN: 9780128033357
The second edition of this go-to reference provides readers with the information, tools, and processes needed to find and analyze forensic evidence using Windows Registry. Tools and techniques for post mortem analysis are discussed at length to take users beyond the current use of viewers and into real analysis of data contained in the Registry.