Introduction 1

Analysis Concepts 3

Windows Versions 4

Analysis Principles 6

Goals 6

Tools Versus Processes 8

Locard’s Exchange Principle 8

Avoiding Speculation 9

Direct and Indirect Artifacts 10

Least Frequency of Occurrence 14

Documentation 15

Convergence 16

Virtualization 17

Setting Up an Analysis System 19

Summary 22

• Analysis Concepts

• Setting Up an Analysis System