Book Review: Windows Forensics and Incident Recovery 
Sunday February 13, 2005
Harlan Carvey is well-known in Windows incident response and forensics circles. He developed his own 2-day, hands-on course in incident response and "live" forensics in a Windows environment and he is a frequent contributor on mailing lists, helping people out whenever he can. After helping me one time, I asked him if there were a book I could get to learn about this stuff and he told me I would have to wait for his book to come out. Now that the book is out, I would have to agree. He wasn't being arrogant; just stating the truth. Book Review: Windows Forensics and Incident Recovery