Books
-
Honeycutt, Jerry. Microsoft Windows Registry Guide. 2nd. Redmond, WA: Microsoft Press, 2005.
-
Kruse, Warren G., and Jay G. Heiser. Computer Forensics: Incident Response Essentials.New York: Addison-Wesley, 2004.
-
Nelson, Bill, Amelia Phillips, Frank Enfinger, and Christopher Steuart. Guide to Computer Forensics and Investigations. 2nd. Canada: Course Technology, 2006.
Journals
-
Carvey, Harlan. "The Windows Registry as a forensic resource." Digital Investigation: The International Journal of Digital Forensics & Incident Response 2(2005): 201-05.
-
Carvey, Harlan, and Cory Altheide. "Tracking USB storage: Analysis of windows artifacts generated by USB storage devices." Digital Investigation: The International Journal of Digital Forensics & Incident Response 2(2005): 94-100.
Online
-
Carvey, Harlan. "Windows Incident Response." [Weblog Mounted Devices] 21 Dec 2004. 8 Apr 2007 <http://windowsir.blogspot.com/2004_12_01_archive.html>.
-
Davies, Peter. "Forensic Analysis of the Windows Registry." Peter Davies. 2006. 3 Feb 2007 <http://www.pkdavies.co.uk/documents/computer_forensics/ registry_examination.pdf>.
-
Jones, Kieth J., and Rohyt Belani. "Web Browser Forensics, Part 1." Security Focus. 30 Mar 2005. 13 Apr 2007 <http://www.securityfocus.com/infocus/1827>.
-
Microsoft, "Description of the Microsoft Windows Registry." Help and Support. 27 Jan 2007. Microsoft Corp. 8 Apr 2007 <http://support.microsoft.com/kb/256986/>.
-
Microsoft, "INFO: Working with the FILETIME Structure." Help and Support. 23 Jan 2007. Microsoft Corp. 8 Apr 2007 <http://support.microsoft.com/kb/188768>.
-
Opera, "Why Choose the Opera Internet Suite?." Operawiki. 2007. 13 Apr 2007 <http://operawiki.info/WhyOpera>.
-
“Registry Quick Find Chart." AccessData. 2005. AccessData Corp. 1 Apr 2007 <http://www.accessdata.com/media/en_US/print/papers/wp.Registry_Quick_Find_Chart.en_us.pdf>.
-
"ROT 13 Encoder/Decoder." Consulting, Development, Research, and Support. 2007. Edoceo, inc.. 14 Apr 2007 <http://www.edoceo.com/utilis/rot13.php>.
-
Srinivasan, Ramesh. "Registry MRU Locations." Ramesh's Site: Troubleshooting Windows. 2006. 14 Apr 2007 <http://windowsxp.mvps.org/RegistryMRU.htm>.
-
Websense, "Emerging Threats: Peer-to-Peer File Sharing." Advanced Systems Group. Websense, Inc. 13 Apr 2007 <http://www.virtual.com/whitepapers/Websense_ Emerging_Threats_Peer-to-Peer_wp.pdf>.
-
Wong, Lih Wern. "Forensic Analysis of the Windows Registry." Forensic Focus. 1 Feb 2007 <http://www.forensicfocus.com/index.php?name=Content&pid=73&page=1>.
