Windows forensic analysis toolkit advanced analysis techniques for Windows 7 - Carvey, Harlan A. (Syngress, 2012)