tag:blogger.com,1999:blog-13777170.post6808787458386871835..comments2024-03-11T02:35:50.848-05:00Comments on grand stream dreams: GSD Linkfest - Trash-mix (buffalo style) editionUnknownnoreply@blogger.comBlogger2125tag:blogger.com,1999:blog-13777170.post-72244521514963261712014-01-27T20:44:09.278-06:002014-01-27T20:44:09.278-06:00@ Harlan - I really appreciate the clarification r...@ Harlan - I really appreciate the clarification regarding the differences in the newer editions! I wasn't picking up that nuance in my all-too-fast reading of the Amazon descriptions. <br /><br />That approach is really great and practical.<br /><br />Cheers!<br /><br />--Claus V.Claushttps://www.blogger.com/profile/11692921474310162470noreply@blogger.comtag:blogger.com,1999:blog-13777170.post-70732639958613887442014-01-27T06:39:46.699-06:002014-01-27T06:39:46.699-06:00..Windows incident-response/forensic-focused maste...<i>..Windows incident-response/forensic-focused master...</i><br /><br />Thanks for your words, but that is hardly the case.<br /><br /><i>The volume on my bookshelf is ā2Eā (handling XP) so I really need to get with the times...</i><br /><br />When I wrote the third edition, it was intended to be a companion book to the second edition, in that in addition to addressing topics in Win7, it also covered other topics. Rather than re-hashing (no pun intended) the chapter on PE files, I instead wrote a chapter on Timeline Analysis, and the tools and techniques in that chapter could be used regard less of OS version.<br /><br />The fourth edition is an update to 3/e, adding additional material, as well as adding two additional chapters.H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.com