TY  - BOOK
AU  - Steel,  Chad
TI  - Windows forensics: the field guide for conducting corporate computer investigations 
U1  - 363.25968 S32W 
ER  -