The Association of Digital Forensics, Security and Law (ADFSL)
The book is available as a paperback and e-book. The e-book versions allow you to preview several chapters at any of a number of online vendors. The e-book prices vary from the same as the soft cover version ($59.99) to about $38.99. Some of the vendor's e-books retain the color illustrations found in the print version, but others produce them in grey scale, so you might want to look out for that. The book is divided into four parts (17 chapters) plus two appendices.
I am compelled to give the book illustrations a highly unfavorable assessment regarding their readability qualities. Their content is otherwise fine and meaningful. Time and again the illustrations are so miniscule that even those of us with the best of vision will be seriously challenged. I hold out the recommendation to review your e-book options over the hardcopy edition. At least in an e-book you have the hope of doing a page-zoom. Review your e-book providers carefully; some I reviewed had "fuzzy graphics." Notwithstanding the problem illustrations, I still recommend this book for its in-the-trenches information and the desktop reference it will become.
Anson, S., Bunting, S., Johnson, R., & Pearson, S. (2012). Mastering Windows Network Forensics and Investigation, 2nd ed. Indianapolis: John Wiley & Sons. 674 pages, ISBN: 978-1-118-16382-5, $59.99 USA/$71.99 CAN.
Ebert, John C.
"Book Review: Mastering Windows Network Forensics and Investigation, 2/E,"
Journal of Digital Forensics, Security and Law: Vol. 7
, Article 6.
Available at: https://commons.erau.edu/jdfsl/vol7/iss4/6