<?xml version="1.0" encoding="UTF-8"?>
<record
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.loc.gov/MARC21/slim http://www.loc.gov/standards/marcxml/schema/MARC21slim.xsd"
    xmlns="http://www.loc.gov/MARC21/slim">

  <leader>03147cam a2200397 a 4500</leader>
  <datafield tag="999" ind1=" " ind2=" ">
    <subfield code="c">79700</subfield>
    <subfield code="d">316977</subfield>
  </datafield>
  <controlfield tag="001">1safari9780128019634</controlfield>
  <controlfield tag="003">CaSebORM</controlfield>
  <controlfield tag="005">20220314103720.0</controlfield>
  <controlfield tag="006">m     o  d        </controlfield>
  <controlfield tag="007">cr cn         </controlfield>
  <controlfield tag="008">211115s2015    xx      o           eng  </controlfield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="z">9780128019634</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="z">9780128019498</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="z">9780128019634</subfield>
  </datafield>
  <datafield tag="024" ind1="8" ind2=" ">
    <subfield code="a">C20140013585</subfield>
  </datafield>
  <datafield tag="024" ind1="8" ind2=" ">
    <subfield code="a">9780128019634</subfield>
  </datafield>
  <datafield tag="035" ind1=" " ind2=" ">
    <subfield code="a">(CaSebORM)9780128019634</subfield>
  </datafield>
  <datafield tag="040" ind1=" " ind2=" ">
    <subfield code="a">Ma-Un</subfield>
    <subfield code="c">Ma-Un</subfield>
  </datafield>
  <datafield tag="041" ind1="0" ind2=" ">
    <subfield code="a">eng</subfield>
  </datafield>
  <datafield tag="082" ind1=" " ind2=" ">
    <subfield code="2">22</subfield>
    <subfield code="a">363.25968</subfield>
    <subfield code="b">MRO</subfield>
  </datafield>
  <datafield tag="100" ind1="1" ind2=" ">
    <subfield code="a">Messier, Ric,</subfield>
    <subfield code="e">author</subfield>
    <subfield code="9">89378</subfield>
  </datafield>
  <datafield tag="245" ind1="1" ind2="0">
    <subfield code="a">Operating System Forensics</subfield>
    <subfield code="h">[electronic resource] /</subfield>
    <subfield code="c">Messier, Ric</subfield>
  </datafield>
  <datafield tag="250" ind1=" " ind2=" ">
    <subfield code="a">1st edition</subfield>
  </datafield>
  <datafield tag="264" ind1=" " ind2="1">
    <subfield code="b">Syngress,</subfield>
    <subfield code="c">2015</subfield>
  </datafield>
  <datafield tag="300" ind1=" " ind2=" ">
    <subfield code="a">1 online resource (386 pages)</subfield>
  </datafield>
  <datafield tag="506" ind1=" " ind2=" ">
    <subfield code="a">Available to OhioLINK libraries</subfield>
  </datafield>
  <datafield tag="520" ind1=" " ind2=" ">
    <subfield code="a">Operating System Forensics is the first book to cover all three critical operating systems for digital forensic investigations in one comprehensive reference. Users will learn how to conduct successful digital forensic examinations in Windows, Linux, and Mac OS, the methodologies used, key technical concepts, and the tools needed to perform examinations. Mobile operating systems such as Android, iOS, Windows, and Blackberry are also covered, providing everything practitioners need to conduct a forensic investigation of the most commonly used operating systems, including technical details of how each operating system works and how to find artifacts. This book walks you through the critical components of investigation and operating system functionality, including file systems, data recovery, memory forensics, system configuration, Internet access, cloud computing, tracking artifacts, executable layouts, malware, and log files. You'll find coverage of key technical topics like Windows Registry, /etc directory, Web browers caches, Mbox, PST files, GPS data, ELF, and more. Hands-on exercises in each chapter drive home the concepts covered in the book. You'll get everything you need for a successful forensics examination, including incident response tactics and legal requirements. Operating System Forensics is the only place you'll find all this covered in one book. Covers digital forensic investigations of the three major operating systems, including Windows, Linux, and Mac OS Presents the technical details of each operating system, allowing users to find artifacts that might be missed using automated tools Hands-on exercises drive home key concepts covered in the book. Includes discussions of cloud, Internet, and major mobile operating systems such as Android and iOS</subfield>
  </datafield>
  <datafield tag="533" ind1=" " ind2=" ">
    <subfield code="a">Electronic reproduction.</subfield>
    <subfield code="b">Boston, MA :</subfield>
    <subfield code="c">Safari,</subfield>
    <subfield code="n">Available via World Wide Web.</subfield>
    <subfield code="d">2016</subfield>
  </datafield>
  <datafield tag="538" ind1=" " ind2=" ">
    <subfield code="a">Mode of access: World Wide Web</subfield>
  </datafield>
  <datafield tag="550" ind1=" " ind2=" ">
    <subfield code="a">Made available through: Safari, an O'Reilly Media Company</subfield>
  </datafield>
  <datafield tag="655" ind1=" " ind2="7">
    <subfield code="a">Electronic books.</subfield>
    <subfield code="2">local</subfield>
    <subfield code="9">89379</subfield>
  </datafield>
  <datafield tag="710" ind1="2" ind2=" ">
    <subfield code="a">Ohio Library and Information Network</subfield>
    <subfield code="9">89380</subfield>
  </datafield>
  <datafield tag="710" ind1="2" ind2=" ">
    <subfield code="a">Safari, an O'Reilly Media Company</subfield>
    <subfield code="9">88237</subfield>
  </datafield>
  <datafield tag="856" ind1="4" ind2="0">
    <subfield code="3">Safari Books Online</subfield>
    <subfield code="z">Connect to resource</subfield>
    <subfield code="u">https://learning.oreilly.com/library/view/-/9780128019634/?ar</subfield>
  </datafield>
  <datafield tag="942" ind1=" " ind2=" ">
    <subfield code="2">ddc</subfield>
    <subfield code="c">BOOK</subfield>
  </datafield>
  <datafield tag="952" ind1=" " ind2=" ">
    <subfield code="1">0</subfield>
    <subfield code="2">2022-03-14</subfield>
    <subfield code="4">0</subfield>
    <subfield code="7">0</subfield>
    <subfield code="a">363.25968 MRO</subfield>
    <subfield code="d">2022-03-14</subfield>
    <subfield code="h">CL</subfield>
    <subfield code="i">00168688</subfield>
    <subfield code="m">CL</subfield>
    <subfield code="r">2022-03-14 00:00:00</subfield>
    <subfield code="t">BOOK</subfield>
    <subfield code="w">ddc</subfield>
    <subfield code="y">0</subfield>
  </datafield>
  <datafield tag="952" ind1=" " ind2=" ">
    <subfield code="1">0</subfield>
    <subfield code="2">2022-03-14</subfield>
    <subfield code="4">0</subfield>
    <subfield code="7">0</subfield>
    <subfield code="a">363.25968 MRO</subfield>
    <subfield code="d">2022-03-14</subfield>
    <subfield code="h">CL</subfield>
    <subfield code="i">00168689</subfield>
    <subfield code="m">CL</subfield>
    <subfield code="r">2022-03-14 00:00:00</subfield>
    <subfield code="t">BOOK</subfield>
    <subfield code="w">ddc</subfield>
    <subfield code="y">0</subfield>
  </datafield>
  <datafield tag="952" ind1=" " ind2=" ">
    <subfield code="1">0</subfield>
    <subfield code="2">2022-03-14</subfield>
    <subfield code="4">0</subfield>
    <subfield code="7">0</subfield>
    <subfield code="a">363.25968 MRO</subfield>
    <subfield code="d">2022-03-14</subfield>
    <subfield code="h">CL</subfield>
    <subfield code="i">00168690</subfield>
    <subfield code="m">CL</subfield>
    <subfield code="r">2022-03-14 00:00:00</subfield>
    <subfield code="t">BOOK</subfield>
    <subfield code="w">ddc</subfield>
    <subfield code="y">0</subfield>
  </datafield>
</record>
