Malware Forensics Field Guide for Windows Systems

Chapter 1. Malware Incident Response: Volatile Data Collection and Examination on a Live Windows System Chapter 2. Memory Forensics: Analyzing Physical and Process Memory Dumps for Malware Artifacts Chapter 3. Post-Mortem Forensics: Discovering and Extracting Malware and Associated Artifacts from Windows Systems Chapter 4. Legal Considerations Chapter 5. File Identification and Profiling Initial Analysis of a Suspect File on a Windows System Chapter 6. Analysis of a Suspect Program Appendix A: Tool Glossary

Cameron H. Malin is a Certified Ethical Hacker (C

"No fluff! The authors present tools and how to use them right out of the gate along with thoughtful advice from their deep experience in the subject."-Stephen Northcutt, President, The SANS Technology Institute "Dissecting the dark side of the Internet with its infectious worms, botnets, rootkits, and Trojan horse programs (known as malware) is a treaterous condition for any forensic investigator or analyst. Written by information security experts with real-world investigative experience, Malware Forensics Field Guide for Windows Systems is a tool with checklists for specific tasks, case studies of difficult situations, and expert analyst tips. This is a condensed hand-held guide complete with on-the-job tasks and checklists. It is specific for Windows-based systems, the largest running OS in the world. Authors are world-renowned leaders in investigating and analyzing malicious code."--VinBoiSoft Blog "As suggested by the title, the authors make no pretension to teach the basics of digital forensics or to provide in- depth explanations.Instead this book acts as reference for professionals involved specifically in malware forensics and aims to provide a handy checklist of procedures and suitable software.Overall the book gives a very thorough set of guidelines and checklists for professionals in the field and should provide information for almost all circumstances when working and should be particularly useful to anyone finding themself without internet access while on a forensics job. As mentioned earlier, this is not a book for the beginner and should be supplemented by other materials if the reader has limited experience."--BCS.com