kai axford, cissp, mcse sr. security strategist microsoft corporation sec305

7

Upload: allison-owens

Post on 18-Jan-2018

213 views

Category:

Documents


0 download

DESCRIPTION

Introductions Bets Practices for Investigations Worst Practices for Investigations Questions and Answers

TRANSCRIPT

Page 1: Kai Axford, CISSP, MCSE Sr. Security Strategist Microsoft Corporation  SEC305
Page 2: Kai Axford, CISSP, MCSE Sr. Security Strategist Microsoft Corporation  SEC305

The Fundamental Computer Investigation Guide for Microsoft Windows : A DiscussionKai Axford, CISSP, MCSESr. Security StrategistMicrosoft Corporationhttp://blogs.technet.com/kaiaxford

SEC305

Page 3: Kai Axford, CISSP, MCSE Sr. Security Strategist Microsoft Corporation  SEC305

AgendaIntroductionsBets Practices for InvestigationsWorst Practices for InvestigationsQuestions and Answers

Page 4: Kai Axford, CISSP, MCSE Sr. Security Strategist Microsoft Corporation  SEC305

ResourcesSecurity Minded – Kai’s Bloghttp://blogs.technet.com/kaiaxford

File System Forensic Analysis. Brian Carrier ISBN: 0-321-26817-2

Digital Evidence and Computer Crime. Eoghan Casey. ISBN: 012162885X

Fundamental Computer Investigation Guide For Windows http://www.microsoft.com/technet/security/guidance/disasterrecovery/computer_investigation/default.mspx

Incident Response: Investigating Computer Crime. Kevin Mandia & Chris ProsiseISBN: 007222696X

Windows Forensic Analysis. Harlan Carvey.ISBN: 159749156X

“How Online Criminals Make Themselves Tough to Find, Near Impossible to Nab”. Berinato, Scott. May 2007. http://www.cio.com

Page 5: Kai Axford, CISSP, MCSE Sr. Security Strategist Microsoft Corporation  SEC305

Questions?

Page 6: Kai Axford, CISSP, MCSE Sr. Security Strategist Microsoft Corporation  SEC305

Evaluation Forms

Page 7: Kai Axford, CISSP, MCSE Sr. Security Strategist Microsoft Corporation  SEC305

© 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.

The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after

the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.