Libris
The little handbook of windows forensics: just some random thoughts about windows forensics - Andrea Fortuna