<?xml version="1.0" encoding="UTF-8"?>
<mods xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://www.loc.gov/mods/v3" version="3.1" xsi:schemaLocation="http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-1.xsd">
  <titleInfo>
    <title>Windows registry forensics : advanced digital forensic analysis of the Windows registry</title>
  </titleInfo>
  <name type="personal">
    <namePart>Carvey, Harlan A.</namePart>
    <role>
      <roleTerm authority="marcrelator" type="text">creator</roleTerm>
    </role>
    <role>
      <roleTerm type="text">author.</roleTerm>
    </role>
  </name>
  <typeOfResource>text</typeOfResource>
  <genre authority="">Electronic books.</genre>
  <originInfo>
    <place>
      <placeTerm type="code" authority="marccountry">mau</placeTerm>
    </place>
    <dateIssued encoding="marc">2016</dateIssued>
    <edition>2nd ed.</edition>
    <issuance>monographic</issuance>
  </originInfo>
  <language>
    <languageTerm authority="iso639-2b" type="code">eng</languageTerm>
  </language>
  <physicalDescription>
    <form authority="gmd">electronic resource</form>
    <extent>1 online resource</extent>
  </physicalDescription>
  <abstract>Harlan Carvey brings readers an advanced book on Windows Registry. The first book of its kind EVER -- Windows Registry Forensics provides the background of the Registry to help develop an understanding of the binary structure of Registry hive files. Approaches to live response and analysis are included, and tools and techniques for postmortem analysis are discussed at length. Tools and techniques will be presented that take the analyst beyond the current use of viewers and into real analysis of data contained in the Registry. Named a 2011 Best Digital Forens.</abstract>
  <note type="statement of responsibility">Harlan Carvey.</note>
  <note>Includes index.</note>
  <subject authority="lcsh">
    <titleInfo>
      <title>Microsoft Windows (Computer file)</title>
    </titleInfo>
  </subject>
  <subject authority="fast">
    <titleInfo>
      <title>Microsoft Windows (Computer file)</title>
    </titleInfo>
  </subject>
  <subject authority="lcsh">
    <topic>Operating systems (Computers)</topic>
  </subject>
  <subject authority="lcsh">
    <topic>Computer crimes</topic>
    <topic>Investigation</topic>
    <topic>Methodology</topic>
  </subject>
  <subject authority="lcsh">
    <topic>Computer networks</topic>
    <topic>Security measures</topic>
  </subject>
  <subject authority="lcsh">
    <topic>Computer security</topic>
  </subject>
  <subject authority="lcsh">
    <topic>Component software</topic>
  </subject>
  <subject authority="bisacsh">
    <topic>SOCIAL SCIENCE</topic>
    <topic>Criminology</topic>
  </subject>
  <subject authority="fast">
    <topic>Component software</topic>
  </subject>
  <subject authority="fast">
    <topic>Computer networks</topic>
    <topic>Security measures</topic>
  </subject>
  <subject authority="fast">
    <topic>Computer security</topic>
  </subject>
  <subject authority="fast">
    <topic>Operating systems (Computers)</topic>
  </subject>
  <classification authority="lcc">HV8079.C65</classification>
  <classification authority="ddc" edition="23">364.16/8</classification>
  <relatedItem type="otherFormat" displayLabel="Print version:">
    <titleInfo>
      <title>Windows registry forensics : advanced digital forensic analysis of the windows registry</title>
    </titleInfo>
    <name>
      <namePart>Carvey, Harlan.</namePart>
    </name>
    <originInfo>
      <publisher>Cambridge, MA : Elsevier, [2016]</publisher>
    </originInfo>
    <identifier type="local">(DLC)   18910328</identifier>
  </relatedItem>
  <identifier type="isbn">9780128033357</identifier>
  <identifier type="isbn">0128033355</identifier>
  <identifier type="isbn">012803291X</identifier>
  <identifier type="isbn">9780128032916</identifier>
  <identifier type="isbn" invalid="yes"/>
  <identifier type="uri">http://www.sciencedirect.com/science/book/9780128032916</identifier>
  <location>
    <url displayLabel="ScienceDirect">http://www.sciencedirect.com/science/book/9780128032916</url>
  </location>
  <recordInfo>
    <recordContentSource authority="marcorg">N$T</recordContentSource>
    <recordCreationDate encoding="marc">160309</recordCreationDate>
    <recordChangeDate encoding="iso8601">20190328114814.0</recordChangeDate>
    <recordIdentifier source="OCoLC">ocn944186046</recordIdentifier>
    <languageOfCataloging>
      <languageTerm authority="iso639-2b" type="code">eng</languageTerm>
    </languageOfCataloging>
  </recordInfo>
</mods>
