Check nearby libraries
Buy this book
While forensic analysis has proven to be a valuable investigative tool in the field of computer security, utilizing anti-forensic technology makes it possible to maintain a covert operational foothold for extended periods, even in a high-security environment. Adopting an approach that favors full disclosure, the updated Second Edition of The Rootkit Arsenal presents the most accessible, timely, and complete coverage of forensic countermeasures. This book covers more topics, in greater depth, than any other currently available. In doing so the author forges through the murky back alleys of the Internet, shedding light on material that has traditionally been poorly documented, partially documented, or intentionally undocumented. The range of topics presented includes how to: Evade post-mortem analysis; Frustrate attempts to reverse engineer your command & control modules; Defeat live incident response; Undermine the process of memory analysis; Modify subsystem internals to feed misinformation to the outside; Entrench your code in fortified regions of execution; Design and implement covert channels; Unearth new avenues of attack. - Publisher.
Check nearby libraries
Buy this book
Previews available in: English
Edition | Availability |
---|---|
1
Rootkit arsenal: escape and evasion in the dark corners of the system
2012, Jones & Bartlett Learning
in English
- 2nd ed.
144962636X 9781449626365
|
aaaa
Libraries near you:
WorldCat
|
Book Details
Table of Contents
Edition Notes
Includes index.
Classifications
The Physical Object
ID Numbers
Community Reviews (0)
Feedback?History
- Created December 7, 2011
- 11 revisions
Wikipedia citation
×CloseCopy and paste this code into your Wikipedia page. Need help?
April 1, 2023 | Edited by ImportBot | import existing book |
December 13, 2022 | Edited by MARC Bot | import existing book |
December 7, 2022 | Edited by ImportBot | import existing book |
February 8, 2022 | Edited by ImportBot | import existing book |
December 7, 2011 | Created by LC Bot | Imported from Library of Congress MARC record |