
Executing Windows Command Line Investigations
While Ensuring Evidentiary Integrity
- 228 pages
- English
- ePUB (mobile friendly)
- Available on iOS & Android
Executing Windows Command Line Investigations
While Ensuring Evidentiary Integrity
About this book
The book Executing Windows Command Line Investigations targets the needs of cyber security practitioners who focus on digital forensics and incident response. These are the individuals who are ultimately responsible for executing critical tasks such as incident response; forensic analysis and triage; damage assessments; espionage or other criminal investigations; malware analysis; and responding to human resource violations.The authors lead readers through the importance of Windows CLI, as well as optimal configuration and usage. Readers will then learn the importance of maintaining evidentiary integrity, evidence volatility, and gain appropriate insight into methodologies that limit the potential of inadvertently destroying or otherwise altering evidence. Next, readers will be given an overview on how to use the proprietary software that accompanies the book as a download from the companion website. This software, called Proactive Incident Response Command Shell (PIRCS), developed by Harris Corporation provides an interface similar to that of a Windows CLI that automates evidentiary chain of custody and reduces human error and documentation gaps during incident response.- Includes a free download of the Proactive Incident Response Command Shell (PIRCS) software- Learn about the technical details of Windows CLI so you can directly manage every aspect of incident response evidence acquisition and triage, while maintaining evidentiary integrity
Frequently asked questions
- Essential is ideal for learners and professionals who enjoy exploring a wide range of subjects. Access the Essential Library with 800,000+ trusted titles and best-sellers across business, personal growth, and the humanities. Includes unlimited reading time and Standard Read Aloud voice.
- Complete: Perfect for advanced learners and researchers needing full, unrestricted access. Unlock 1.4M+ books across hundreds of subjects, including academic and specialized titles. The Complete Plan also includes advanced features like Premium Read Aloud and Research Assistant.
Please note we cannot support devices running on iOS 13 and Android 7 or earlier. Learn more about using the app.
Information
Table of contents
- Cover image
- Title page
- Table of Contents
- Copyright
- Dedication
- Biography
- Foreword
- Preface
- Acknowledgments
- Harris Corporation
- Chapter 1: The Impact of Windows Command Line Investigations
- Chapter 2: Importance of Digital Evidence Integrity
- Chapter 3: Windows Command Line Interface
- Chapter 4: Operating the Proactive Incident Response Command Shell
- Chapter 5: Use Cases
- Chapter 6: Future Considerations
- Appendix A: Third-party Windows CLI Tools
- Appendix B: Windows CLI Reference Synopsis
- Index