<?xml version="1.0" encoding="UTF-8"?>
<record
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.loc.gov/MARC21/slim http://www.loc.gov/standards/marcxml/schema/MARC21slim.xsd"
    xmlns="http://www.loc.gov/MARC21/slim">

  <leader>03034cam a2200565Ii 4500</leader>
  <controlfield tag="001">ocn944186046</controlfield>
  <controlfield tag="003">OCoLC</controlfield>
  <controlfield tag="005">20190328114814.0</controlfield>
  <controlfield tag="006">m     o  d        </controlfield>
  <controlfield tag="007">cr cnu|||unuuu</controlfield>
  <controlfield tag="008">160309s2016    mau     o     001 0 eng d</controlfield>
  <datafield tag="040" ind1=" " ind2=" ">
    <subfield code="a">N$T</subfield>
    <subfield code="b">eng</subfield>
    <subfield code="e">rda</subfield>
    <subfield code="e">pn</subfield>
    <subfield code="c">N$T</subfield>
    <subfield code="d">OPELS</subfield>
    <subfield code="d">N$T</subfield>
    <subfield code="d">YDX</subfield>
    <subfield code="d">UMI</subfield>
    <subfield code="d">STF</subfield>
    <subfield code="d">DEBBG</subfield>
    <subfield code="d">COO</subfield>
    <subfield code="d">VT2</subfield>
    <subfield code="d">TOH</subfield>
    <subfield code="d">U3W</subfield>
    <subfield code="d">OCLCA</subfield>
    <subfield code="d">D6H</subfield>
    <subfield code="d">OCLCF</subfield>
    <subfield code="d">UOK</subfield>
    <subfield code="d">CEF</subfield>
    <subfield code="d">KSU</subfield>
    <subfield code="d">OCLCQ</subfield>
    <subfield code="d">AU@</subfield>
    <subfield code="d">OCLCA</subfield>
    <subfield code="d">WYU</subfield>
  </datafield>
  <datafield tag="019" ind1=" " ind2=" ">
    <subfield code="a">958349834</subfield>
    <subfield code="a">958446630</subfield>
    <subfield code="a">961332323</subfield>
    <subfield code="a">974331910</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="a">9780128033357</subfield>
    <subfield code="q">(electronic bk.)</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="a">0128033355</subfield>
    <subfield code="q">(electronic bk.)</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="a">012803291X</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="a">9780128032916</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="z">9780128032916</subfield>
    <subfield code="q">(print)</subfield>
  </datafield>
  <datafield tag="035" ind1=" " ind2=" ">
    <subfield code="a">(OCoLC)944186046</subfield>
    <subfield code="z">(OCoLC)958349834</subfield>
    <subfield code="z">(OCoLC)958446630</subfield>
    <subfield code="z">(OCoLC)961332323</subfield>
    <subfield code="z">(OCoLC)974331910</subfield>
  </datafield>
  <datafield tag="050" ind1=" " ind2="4">
    <subfield code="a">HV8079.C65</subfield>
  </datafield>
  <datafield tag="072" ind1=" " ind2="7">
    <subfield code="a">SOC</subfield>
    <subfield code="x">004000</subfield>
    <subfield code="2">bisacsh</subfield>
  </datafield>
  <datafield tag="082" ind1="0" ind2="4">
    <subfield code="a">364.16/8</subfield>
    <subfield code="2">23</subfield>
  </datafield>
  <datafield tag="100" ind1="1" ind2=" ">
    <subfield code="a">Carvey, Harlan A.,</subfield>
    <subfield code="e">author.</subfield>
  </datafield>
  <datafield tag="245" ind1="1" ind2="0">
    <subfield code="a">Windows registry forensics : advanced digital forensic analysis of the Windows registry / </subfield>
    <subfield code="h">[electronic resource]</subfield>
    <subfield code="c">Harlan Carvey.</subfield>
  </datafield>
  <datafield tag="250" ind1=" " ind2=" ">
    <subfield code="a">2nd ed.</subfield>
  </datafield>
  <datafield tag="264" ind1=" " ind2="1">
    <subfield code="a">Cambridge, MA :</subfield>
    <subfield code="b">Syngress is an imprint of Elsevier,</subfield>
    <subfield code="c">2016.</subfield>
  </datafield>
  <datafield tag="264" ind1=" " ind2="4">
    <subfield code="c">&#xFFFD;2016</subfield>
  </datafield>
  <datafield tag="300" ind1=" " ind2=" ">
    <subfield code="a">1 online resource</subfield>
  </datafield>
  <datafield tag="336" ind1=" " ind2=" ">
    <subfield code="a">text</subfield>
    <subfield code="b">txt</subfield>
    <subfield code="2">rdacontent</subfield>
  </datafield>
  <datafield tag="337" ind1=" " ind2=" ">
    <subfield code="a">computer</subfield>
    <subfield code="b">c</subfield>
    <subfield code="2">rdamedia</subfield>
  </datafield>
  <datafield tag="338" ind1=" " ind2=" ">
    <subfield code="a">online resource</subfield>
    <subfield code="b">cr</subfield>
    <subfield code="2">rdacarrier</subfield>
  </datafield>
  <datafield tag="500" ind1=" " ind2=" ">
    <subfield code="a">Includes index.</subfield>
  </datafield>
  <datafield tag="588" ind1="0" ind2=" ">
    <subfield code="a">Online resource; title from PDF title page (SpringerLink, viewed March 16, 2016).</subfield>
  </datafield>
  <datafield tag="520" ind1=" " ind2=" ">
    <subfield code="a">Harlan Carvey brings readers an advanced book on Windows Registry. The first book of its kind EVER -- Windows Registry Forensics provides the background of the Registry to help develop an understanding of the binary structure of Registry hive files. Approaches to live response and analysis are included, and tools and techniques for postmortem analysis are discussed at length. Tools and techniques will be presented that take the analyst beyond the current use of viewers and into real analysis of data contained in the Registry. Named a 2011 Best Digital Forens.</subfield>
  </datafield>
  <datafield tag="630" ind1="0" ind2="0">
    <subfield code="a">Microsoft Windows (Computer file)</subfield>
  </datafield>
  <datafield tag="630" ind1="0" ind2="7">
    <subfield code="a">Microsoft Windows (Computer file)</subfield>
    <subfield code="2">fast</subfield>
    <subfield code="0">(OCoLC)fst01367862</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="0">
    <subfield code="a">Operating systems (Computers)</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="0">
    <subfield code="a">Computer crimes</subfield>
    <subfield code="x">Investigation</subfield>
    <subfield code="x">Methodology.</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="0">
    <subfield code="a">Computer networks</subfield>
    <subfield code="x">Security measures.</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="0">
    <subfield code="a">Computer security.</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="0">
    <subfield code="a">Component software.</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="7">
    <subfield code="a">SOCIAL SCIENCE</subfield>
    <subfield code="x">Criminology.</subfield>
    <subfield code="2">bisacsh</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="7">
    <subfield code="a">Component software.</subfield>
    <subfield code="2">fast</subfield>
    <subfield code="0">(OCoLC)fst00871617</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="7">
    <subfield code="a">Computer networks</subfield>
    <subfield code="x">Security measures.</subfield>
    <subfield code="2">fast</subfield>
    <subfield code="0">(OCoLC)fst00872341</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="7">
    <subfield code="a">Computer security.</subfield>
    <subfield code="2">fast</subfield>
    <subfield code="0">(OCoLC)fst00872484</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="7">
    <subfield code="a">Operating systems (Computers)</subfield>
    <subfield code="2">fast</subfield>
    <subfield code="0">(OCoLC)fst01046280</subfield>
  </datafield>
  <datafield tag="655" ind1=" " ind2="4">
    <subfield code="a">Electronic books.</subfield>
  </datafield>
  <datafield tag="776" ind1="0" ind2="8">
    <subfield code="i">Print version:</subfield>
    <subfield code="a">Carvey, Harlan.</subfield>
    <subfield code="t">Windows registry forensics : advanced digital forensic analysis of the windows registry.</subfield>
    <subfield code="d">Cambridge, MA : Elsevier, [2016]</subfield>
    <subfield code="z">9780128032916</subfield>
    <subfield code="w">(DLC)   18910328</subfield>
  </datafield>
  <datafield tag="856" ind1="4" ind2="0">
    <subfield code="3">ScienceDirect</subfield>
    <subfield code="u">http://www.sciencedirect.com/science/book/9780128032916</subfield>
  </datafield>
  <datafield tag="999" ind1=" " ind2=" ">
    <subfield code="c">247297</subfield>
    <subfield code="d">247297</subfield>
  </datafield>
</record>
