[caption id="attachment_579" align="alignleft" width="700"] "Of course you can trust PDF downloads." - UglyGorilla and KandyGoo
I have been given about a dozen or so URLs from friends with the X-Ways Practitioner's Guide as downloads. Mostly, I am given the URLs so I can let the publisher know and they can take the pirated files down (good luck with that....).
If you ever considered downloading these sort of of things, just a thought, don't do it! I'd hate for bad things to happen to your computer because of a file with my name on it that was manipulated by Unit 61398 or some other hacking organization.
[caption id="attachment_1218" align="aligncenter" width="708"] My personal favorite....Placing the Suspect Behind the Keyboard...it's the first and only writing on the subject manner incorporating investigative methods in and out of the (computer) box.
I previously posted that a book on FTK is sure to come along, since we have the best book of X-Ways and the other book on Encase. Now comes a book on FTK. Just like the XWF Guide or the upcoming Encase guide, I wouldn't see any reason for a FTK user to not have a book on FTK.
It makes sense to have "the" book on X-Ways, "the" book on Encase, and "the" book on FTK. By having books on your major forensic suites, it is easier to compare what suite "A" does compared to tools "B" and "C" as well as how to get from point A to B using each tool.
So....how about that book on ProDiscover? Anyone? Grab the opportunity before someone else does. I promise to buy it, as I have already ordered the FTK and Encase books.
I'm duplicating this post from another blog because this will probably be the coolest book to come out this year in digital forensics and is a must-have. The short version as to why the book is a must-have is "duh, it's Harlan's latest book...and Windows 8..."
I also think this is one of those books that if not pre-ordered, will have you waiting until it is reprinted due to being over-ordered. The X-Ways Practitioner's Guide was one of those books too, where late-comers had to wait weeks for the second printing. This book is no different, because just about all of the neat things in the book show just how much Harlan has discovered in some very neat areas of Windows 8.
One thing I learned about ordering books from Amazon, is that Amazon will pretty much match the lowest price found elsewhere. I also learned that with a pre-ordered book, you can cancel before the book is printed if you find a lower price somewhere else. The point is, pre-order the book or you may be waiting a month after everyone else gets their copy...it comes out in April '14 and I'd expect the second printing to be needed in April '14...
I have a detailed review of this book at http://winfe.wordpress.com. In short, it's a really good book and of all tools to choose for the research in the book, the authors picked X-Ways Forensics. But then, that should not come as any surprise.
There's still time to ask Santa to put this in your stocking...
You can tell that X-Ways Forensics has made it into the market when so many DFIR job requirements list X-Ways Forensics as one of the 'big 3' tools to know to apply.
For those that are tinkering with writing X-Tensions, the documentation at the x-ways.net site was just updated on Sept 27. Don't forget to send your x-tension to X-Ways to share with all of us, just like Mom told you when you were little.