Linux Malware Incident Response_ A Practitioner#39;s Guide ile Data - Cameron Malin Eoghan Casey James Aquilina信息安全资料.pdfVIP

LinuxMalwareIncidentResponse:A

Practitioner’sGuidetoForensicCollection

andExaminationofVolatileData

AnExcerptfromMalwareForensicsFieldGuide

forLinuxSystems

CameronH.Malin

EoghanCasey

JamesM.Aquilina

TableofContents

Coverimage

Titlepage

Dedication

Copyright

Introduction

HowToUseThisBook

InvestigativeApproach

ForensicAnalysisInMalwareInvestigations

ApplyingForensicsToMalware

FromMalwareAnalysisToMalwareForensics

Chapter1.LinuxMalwareIncidentResponse

Introduction

VolatileDataCollectionMethodology

NonvolatileDataCollectionFromALiveLinuxSystem

Conclusion

Appendix1

IncidentResponseToolSuites

RemoteCollectionTools

VolatileDataCollectionAndAnalysisTools

CollectingSubjectSystemDetails

IdentifyingUsersLoggedIntoTheSystem

NetworkConnectionsAndActivity

ProcessAnalysis

LoadedModules

OpenedFiles

CommandHistory

Appendix2

LiveResponse:FieldNotes

Appendix3

LiveResponse:FieldInterviewQuestions

Appendix4

PitfallsToAvoid

SelectedReadings

Dedication

ThematerialinthisbookisexcerptedfromMalware

ForensicsFieldGuideforLinuxSystems

FormoreFirstLooktitlesandSyngressoffersgoto

/SyngressFirstLook

Copyright

SyngressisanimprintofElsevier

TheBoulevard,LangfordLane,Kidlington,Oxford,OX51GB,UK

225WymanStreet,Waltham,MA02451,USA

Firstpublished2013

Copyright©2013ElsevierInc.Allrightsreserved

Nopartofthispublicationmaybereproducedortransmittedinanyformorbyany

means,electronicormechanical,includingphotocopying,recording,oranyinformation

storageandretrievalsystem,withoutpermissioninwritingfromthepublisher.Details

onhowtoseekpermission