Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #11  
Old 10-07-2012, 01:24
typedef
 
Posts: n/a
The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System

This may have been posted before...

The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System

Overview

While forensic analysis has proven to be a valuable investigative tool in the field of computer security, utilizing anti-forensic technology makes it possible to maintain a covert operational foothold for extended periods, even in a high-security environment. Adopting an approach that favors full disclosure, the updated Second Edition of The Rootkit Arsenal presents the most accessible, timely, and complete coverage of forensic countermeasures. This book covers more topics, in greater depth, than any other currently available. In doing so the author forges through the murky back alleys of the Internet, shedding light on material that has traditionally been poorly documented, partially documented, or intentionally undocumented.

The range of topics presented includes how to:
• Evade post-mortem analysis
• Frustrate attempts to reverse engineer your command & control modules
• Defeat live incident response
• Undermine the process of memory analysis
• Modify subsystem internals to feed misinformation to the outside
• Entrench your code in fortified regions of execution
• Design and implement covert channels
• Unearth new avenues of attack

http://www.mediafire.com/?hd5nrw5hykt
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
ebooks conan981 General Discussion 0 07-07-2006 22:36
some ebooks fulone General Discussion 1 05-20-2004 21:22


All times are GMT +8. The time now is 17:42.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )