Windows Forensic Analysis Toolkit, 4th Edition - Carvey, Harlan A. (Syngress, 2014)