* Details the techniques needed to thoroughly investigate, analyze, and document a criminal act on a Windows computer or network, including step-by-step coverage of how to fully investigate a Windows intrusion incident
* Focuses on investigating criminal activity rather than inappropriate use of company networks and systems
* Aimed at law enforcement personnel, prosecutors, and corporate investigators tasked with the investigation and prosecution of high technology crime
* Also covers the emerging field of "live forensics," in which investigators access live data on a computer, server, or network as opposed to performing investigations on unplugged machines or data files, since valuable evidence may be lost once the machine is unplugged