Malware Forensics: Investigating and Analyzing Malicious Code

Malware Forensics: Investigating and Analyzing Malicious Code

Volumn , Issue , 2008, Pages 1-674

  Aquilina, James M ^a   Casey, Eoghan ^b   Malin, Cameron H ^b  

^a Deputy General Counsel of Stroz Friedberg   (United States)

^b NONE

Author keywords

[No Author keywords available]

Indexed keywords

CODES (SYMBOLS); COMPUTER CRIME; COMPUTER OPERATING SYSTEMS; LINUX; PROGRAM DEBUGGING; WINDOWS OPERATING SYSTEM;

EVIDENCE COLLECTION; EVOLUTIONARY HISTORY; GENERIC CONTEXTS; LINUX- OPERATING SYSTEM; MALICIOUS CODES; MALWARE ANALYSIS; STATIC CODE ANALYSIS; TOOLS AND TECHNIQUES;

MALWARE;

EID: 77952749465     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.1016/B978-1-59749-268-3.X0001-1     Document Type: Book

References (51)

1. Kevin Mandia, Chris Prosise & Matt Pepe, Incident Response & Computer Forensics (McGraw-Hill/Osborne, Second Edition, 2003)
2. Steve Anson and Steve Bunson, Mastering Windows Network Forensics and Ivestigation, (Sybex/Wiley, 2007).
3. Mandiant http://www.mandiant.com/education/incidentresponse.htm
4. http://www.agilerm.net/publications_4.html
5. http://msdn.microsoft.com/en-us/library/ms817948.aspx
6. http://technet.microsoft.com/en-us/library/bb490864.aspx.
7. http://www.diamondcs.com.au/consoletools.php
8. http://msdn.microsoft.com/en-us/library/ms685141.aspx
9. http://www.microsoft.com/downloads/details.aspx?FamilyID=E089CA41-6A87-40C8-BF69-28AC08570B7E&displaylang=en
10. http://www.trapkit.de/papers/index.html
11. Klein, "Process Dump Analyses: Forensical acquisition and analyses of volatile data, " 2006.
12. Keith J. Jones, Richard Bejtlich & Curtis W. Rose, Real Digital Forensics: Computer Security and Incident Response, (Addison Wesley, 2005)
13. Kevin Mandia, Chris Prosise & Matt Pepe, Incident Response & Computer Forensics (McGraw-Hill/Osborne, Second Edition, 2003)
14. Ed Skoudis & Lenny Zeltser, Malware: Fighting Malicious Code, (Prentice Hall, 2003).
15. http://msdn.microsoft.com/en-us/library/ms791453.aspx
16. https://www.blackhat.com/presentations/bh-usa-7/Harbour/Presentation/bh-usa-07-harbour.pdf
17. http://www.sophos.com/security/analyses/viruses-and-spyware/w32agobotcr.html
18. http://www.diamondcs.com.au/freeutilities/md5.php
19. http://www.toast442.org/md5/
20. http://www.blisstonia.com/software/WinMD5/
21. http://downloads.zdnet.com/abstract.aspx?docid=257281
22. http://www.dfrws.org/2006/proceedings/12-Kornblum.pdf
23. http://www.dfrws.org/2006/proceedings/12-Kornblum.pdf
24. http://www.dfrws.org/2006/proceedings/12-Kornblum.pdf
25. http://mark0.net/soft-minidumper-e.html
26. http://www.x-ways.net/winhex/
27. http://www.f-secure.com/v-descs/haxdoor.shtml
28. Lenny Zeltser, SANS Reverse-Engineering Malware Tools and Techniques Hands-on, 2005.
29. Lenny Zeltser, SANS Reverse-Engineering Malware Tools and Techniques Hands-on, 2005.
30. Mandiant Red Curtain User Guide
31. Mandiant Red Curtain User Guide
32. Keith J. Jones, Richard Bejtlich & Curtis W. Rose, Real Digital Forensics: Computer Security and Incident Response, (Addison Wesley, 2005)
33. Kevin Mandia, Chris Prosise & Matt Pepe, Incident Response & Computer Forensics (McGraw-Hill/Osborne, Second Edition, 2003)
34. Ed Skoudis & Lenny Zeltser, Malware: Fighting Malicious Code, (Prentice Hall, 2003)."
35. http://www.dfrws.org/2006/proceedings/12-Kornblum.pdf
36. http://www.dfrws.org/2006/proceedings/12-Kornblum.pdf
37. http://www.dfrws.org/2006/proceedings/12-Kornblum.pdf
38. http://www.trilithium.com/johan/2005/08/linux-gate/.
39. http://seclists.org/fulldisclosure/2004/Nov/0329.htmlhttps://itso.iu.edu/bulletins/ITSO.2005.06.28.solaris-ldso;www.cag.csail.mit.edu/rio/security-usenix.pdf
40. http://gnunet.org/libextractor/
41. http://gnunet.org/libextractor/documentation.php?xlang=English
42. http://gnunet.org/libextractor/documentation.php?xlang=English
43. http://gnunet.org/libextractor/documentation.php?xlang=English
44. Burneye Readme File, version 1.0
45. Burneye Readme File, version 1.0
46. http://www.bellevuelinux.org/user_space.html
47. http://www.bellevuelinux.org/kernel_space.html
48. http://ngrep.sourceforge.net/
49. http://nmap.org/
50. http://www.nessus.org/nessus/
51. http://www.virusbtn.com/resources/glossary/blended_threat.xml