Windows Registry Forensics - Carvey, Harlan A.; Hull, Dave; Carvey, Harlan (Syngress, 2011)