Operating System Forensics - Messier, Ric; Mackay, Kevin (Syngress, 2016)