tag:blogger.com,1999:blog-9518042.post8523300616335898840..comments2024-03-19T07:46:20.437-05:00Comments on Windows Incident Response: A little about my book...Unknownnoreply@blogger.comBlogger14125tag:blogger.com,1999:blog-9518042.post-53889632891833141622007-06-02T05:39:00.000-05:002007-06-02T05:39:00.000-05:00Richard,Dude you're so right! Forget the Porsche....Richard,<BR/><BR/>Dude you're so right! Forget the Porsche...I can't even feed my horse on the royalties! ;-)H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-63146861343934733782007-06-02T05:35:00.000-05:002007-06-02T05:35:00.000-05:00Thanks for the comments!Thanks for the comments!H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-51247159934664443372007-06-01T22:56:00.000-05:002007-06-01T22:56:00.000-05:00See how dense I am (or brainwashed by too many ye...See how dense I am (or brainwashed by too many years in front of the mass-media)...I didn't even really notice it until you just pointed it out.<BR/><BR/>I actually like the fact that you refer to it in context. Provides a nice friendly way of pointing out what additional content is available in your tomes, but your posts seem to stand well on their own merits.<BR/><BR/>Keep the tips and perspectives on forensics coming!Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-9518042.post-8226500572334589372007-06-01T20:07:00.000-05:002007-06-01T20:07:00.000-05:00Keep the books coming and don't shut up about them...Keep the books coming and don't shut up about them.<BR/><BR/>Your first book is one of my reference books.<BR/><BR/>Im sure your second will be too.<BR/><BR/>-secret_squirrelAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-9518042.post-69521049452247131602007-06-01T18:13:00.000-05:002007-06-01T18:13:00.000-05:00Andrew,I cite my books for the same reason Harlan ...Andrew,<BR/><BR/>I cite my books for the same reason Harlan does. It's shorthand for not having to repeat a bunch of related material.<BR/><BR/>It's definitely not to sell books. Neither of us are driving Porsches financed by royalties!Richard Bejtlichhttps://www.blogger.com/profile/13512184196416665417noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-70566805232814216822007-06-01T14:44:00.000-05:002007-06-01T14:44:00.000-05:00Don't worry Harlan...you're not even coming close ...Don't worry Harlan...you're not even coming close to the number of "as I said in my book" references that Richard Bejtlich makes :)Andrew Hayhttps://www.blogger.com/profile/02019230621654493911noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-57962483992414149812007-06-01T09:42:00.000-05:002007-06-01T09:42:00.000-05:00Anonymous, I'm focusing on detection and response....Anonymous, <BR/><BR/><I>I'm focusing on detection and response...</I><BR/><BR/>Okay, great. Now, a book about Perl scripting is exactly that...a book about how to use a tool to perform certain tasks. <I>Windows Forensic Analysis</I> provides a great deal of code, not only as Perl scripts but also as compiled, standalone EXEs. <BR/><BR/>How have these tools not met your needs?<BR/><BR/><I>...as long as it's written so novice programmers can understand it, you have useful programs, and include the code you talk about on CD, I'm sure I'll get something out of it.</I><BR/><BR/>That's what I was shooting for in <I>WFA</I>...again, how can I do that better?H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-74563270741751111702007-06-01T08:49:00.000-05:002007-06-01T08:49:00.000-05:00Harlan,I'm focusing on detection and response, so ...Harlan,<BR/><BR/>I'm focusing on detection and response, so personally I'd like it to cover that more so than dead analysis. However, as long as it's written so novice programmers can understand it, you have useful programs, and include the code you talk about on CD, I'm sure I'll get something out of it.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-9518042.post-35334822085357643252007-06-01T08:15:00.000-05:002007-06-01T08:15:00.000-05:00Don't sweat it. You do good work, as anyone who ha...Don't sweat it. You do good work, as anyone who has read your first book and this blog can tell. I wouldn't want to constantly repeat/repost myself all over the place either. In fact, to me it seems that when you reference "my book" you just end up giving the readers more information and greater insight regarding the topic you're discussing. Everyone wins! Much appreciated. Thanks.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-9518042.post-34850018031115734552007-06-01T07:36:00.000-05:002007-06-01T07:36:00.000-05:00Mark,Thanks for the comments. Sometimes it helps ...Mark,<BR/><BR/>Thanks for the comments. Sometimes it helps to have these things re-written using different words, by different people...<BR/><BR/>Anonymous II,<BR/><BR/>I'm working on some ideas for the "Perl Scripting for Forensic Professionals" book...a slight change in the title from what the publisher posted on Amazon due to not being able to get co-authors onboard. <BR/><BR/>I'm going to throw this out there...I did it with my second book and didn't get a great deal of response...what would <B><I>YOU</I></B> like to or expect to see in a book of that title? What would you expect to see in such a book that isn't available in "Windows Forensic Analysis"?H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-32903575946290341532007-06-01T07:15:00.000-05:002007-06-01T07:15:00.000-05:00Speaking of books, I really hope you write your Pe...Speaking of books, I really hope you write your Perl security book since I'm just starting to learn Perl myself, and am looking forward to using it to help look for signs of intrusions. I'm not there yet, but hopefully your book will help me get there.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-9518042.post-5403512339471373932007-06-01T07:13:00.000-05:002007-06-01T07:13:00.000-05:00Anonymous,Most people who have been reading Harlan...Anonymous,<BR/><BR/>Most people who have been reading Harlan's blog already know the title of Harlan's book. When he refers to it as 'my book' we automatically put the title in that spot when we read it. <BR/><BR/>Now for the crack about proper citing, <B>think</B> this is a blog, what is a blog but running commentary/news on certain topics, it is not that formal. If you look at the tagged words in the blog you will see that they do reference other sites, people, etc.., it is just not in the formal way people who only write papers are used to, but the way a blog uses references. The references are still there and best of all they are hyperlinked so you can go to exactly what he is referencing and look at it.<BR/><BR/>For the people who are turned off by harlan's references to 'his book' in the blog. All he is doing is providing more reference material that he put together in the book for you to go look at if you want. Now I am not sure why you would not want to read his book if you are reading his blog. I have not gotten the book yet but if it is anything like the first one then I know it will be excellent and a great reference to have.Mark McKinnonhttps://www.blogger.com/profile/06597353327384503465noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-55407645321249430652007-06-01T06:57:00.000-05:002007-06-01T06:57:00.000-05:00Thanks for your comment, anonymous.Thanks for your comment, anonymous.H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-35345120899743528362007-06-01T06:34:00.000-05:002007-06-01T06:34:00.000-05:00Sir,Most published authors refer to the title of t...Sir,<BR/>Most published authors refer to the title of the book, not 'my book', in the body of a publication. Then the title and author are cited at the end, in the bibliography. This makes your work look like it was done by an educated professional.Anonymousnoreply@blogger.com