Daily Blog #531: DFIR In Depth: Windows Forensics

Hello Reader,

         After an excellent suggestion yesterday, thanks Bobby Joe, I've decided to get book writing again. However this time I'm going to try to push out iterative updates as I complete it via LeanPub. My plan is to push out the first outline and first chapter as the first 'completed book' and then take advantage of LeanPub's ability to push updates.

So the idea is you buy it when you'd like to and then every time I finish a chapter it will get pushed to you. This will allow me to push forward on getting the book done without making you wait the normal year or two to read, after which time I'm usually sick of the text and moving on to the new one.

What's the book called? I'm glad you asked it's:
Windows Forensics: DFIR In Depth

You can see the leanpub page here:
https://leanpub.com/windowsforensics

I'm going to get started on my long flights back to Texas late tonight from Dubai and start pushing out chapters. The idea is I'm going to start with the knowledge I've gained from the Test Kitchen series and then expand to everything else I know in a way that lets me more formally document what I know without fear if it being forever frozen in a publishers hands without being able to update it in the future.

I'm excited to try this, I'm really trying to push myself forward in the next few years to come and I hope you'll join me in this journey. 

Continue Reading: Daily Blog #533 Windows Forensics DFIR InDepth Proposed Outline

Read More

The new book is out!

Well I thought I had another month but it looks like McGraw Hill is faster than I thought!

You can get the print edition here:

and the Kindle edition here:

Since the book is out early its good news for those of you patiently waiting, but its bad news for me... the website isn't done yet!

www.learndfir.com is the new website I'll be using for the new book 'Infosec Pro Guide Computer Forensics' and the 'Hacking Exposed: Computer Forensics' series. I am working on having the full site up as soon as I can with all the links, documents, and forensic images for each of the case example chapters in the new book. I'm also working on youtube videos to show how to work each chase in three different tools:

SIFT

Encase 7

FTK 4 (unless 5 comes out sooner than I expect)

You are welcome to use the images/videos without the book, but to really understand the scope of the case it will really help!

Wish me luck reader, I've got a lot of work to do.

Also Read: NTFS Triforce - A deeper look inside the artifacts

Read More

New year, New book! - Computer Forensics, A Beginner's Guide

Hello Readers,
                       I thought I'd take this weeks post to announce that I just signed the contract with McGraw Hill to write a new book. It will be called 'Computer Forensics, A Beginner's Guide'. It's meant for those of you already in the IT field who are looking for a jump start into your first computer forensics investigations. I'll post more details as I finish the manuscript but we are currently set to have in stores in early November.

Also Read: What are you missing? AIX

Read More