Mastering Windows Network Forensics and Investigation, 2nd Edition

Chapter 2

The Microsoft Network Structure

One of the issues that make performing a network examination in a Windows environment particularly challenging is dealing with the many Microsoft-specific terms and concepts. This chapter will explain networking “the Microsoft way” and serve as a basic networking primer for those who are not familiar with how Microsoft structures its network environment. In addition, this chapter will illustrate how attackers can take advantage of many of these network functions to do evil within the network. For those readers who are already Microsoft Certified Systems Engineers, IT Professionals, Masters, Architects, or whatever other certification Microsoft may have created by the time you read this book, you may want ...