Hale Ligh / Case / Levy The Art of Memory Forensics

Detecting Malware and Threats in Windows, Linux, and Mac Memory
1. Auflage 2014
ISBN: 978-1-118-82499-3
Verlag: John Wiley & Sons
Format: EPUB
Kopierschutz: Adobe DRM (»Systemvoraussetzungen)

E-Book, Englisch, 912 Seiten, E-Book

Memory forensics provides cutting edge technology to helpinvestigate digital attacks
Memory forensics is the art of analyzing computer memory (RAM)to solve digital crimes. As a follow-up to the best seller MalwareAnalyst's Cookbook, experts in the fields of malware, security, anddigital forensics bring you a step-by-step guide to memoryforensics--now the most sought after skill in the digitalforensics and incident response fields.
Beginning with introductory concepts and moving toward theadvanced, The Art of Memory Forensics: Detecting Malware andThreats in Windows, Linux, and Mac Memory is based on a five daytraining course that the authors have presented to hundreds ofstudents. It is the only book on the market that focusesexclusively on memory forensics and how to deploy such techniquesproperly. Discover memory forensics techniques:
* How volatile memory analysis improves digitalinvestigations
* Proper investigative steps for detecting stealth malware andadvanced threats
* How to use free, open source tools for conducting thoroughmemory forensics
* Ways to acquire memory from suspect systems in a forensicallysound manner
The next era of malware and security breaches are moresophisticated and targeted, and the volatile memory of a computeris often overlooked or destroyed as part of the incident responseprocess. The Art of Memory Forensics explains the latesttechnological innovations in digital forensics to help bridge thisgap. It covers the most popular and recently released versions ofWindows, Linux, and Mac, including both the 32 and 64-biteditions.

Autoren/Hrsg.

Hale Ligh, Michael

Case, Andrew

Levy, Jamie

Walters, AAron

Über Autor(innen)

Michael Hale-Ligh is author of Malware Analyst's Cookbook, Secretary/Treasurer of Volatility Foundation, and a world-class reverse engineer.
Andrew Case is a Digital Forensics Researcher specializing in memory, disk, and network forensics.
Jamie Levy is a Senior Researcher and Developer, targeting memory, network, and malware forensics analysis.
AAron Walters is founder and lead developer of the Volatility Project, President of the Volatility Foundation, and Chair of Open Memory Forensics Workshop.