Windows Forensics and Incident Recovery

Description

*******************************************************************************

Windows Forensics and Incident Recovery

*******************************************************************************



-------------------------------------------------------------------------------

General Information

-------------------------------------------------------------------------------

Type.................: Ebook

Part Size............: 7,524,994 bytes









-------------------------------------------------------------------------------

Post Information

-------------------------------------------------------------------------------

Posted by............: ~tqw~



-------------------------------------------------------------------------------

Release Notes

-------------------------------------------------------------------------------

From the Publisher



Windows systems are the world's #1 target for hackers. But until now, there's

been no single source for reliable, usable information on Windows incident

response and forensic auditing. Now, leading Windows security expert and

instructor Harlan Carvey offers a start-to-finish guide to the subject:

everything administrators must know to recognize and respond to virtually any

attack.



Drawing on his widely acclaimed $995 course, Carvey uses real-world examples to

cover every significant incident response, recovery, and forensics technique. He

delivers a complete incident response toolset that combines today's best open

source and freeware tools, his own exclusive software and scripts, and

step-by-step instructions for using them. This book's tools and techniques apply

to every current and professional version of Windows: NT, 2000, XP, and Windows

2003 Server.



Coverage includes:



* Understanding the most widespread forms of Windows attacks

* Developing a practical methodology for responding to potential attacks

* Preparing your systems to prevent and detect incidents

* Recognizing the signatures of an attack -- in time to act

* Uncovering attacks that evade detection by Event Viewer, Task Manager, and

other Windows GUI tools

* Mastering Windows 2000/2003 live forensic tools and techniques

* Using Forensics Server to automate data collection during live

investigations

* Analyzing live forensics data as you capture it

* Performing bit-level drive imaging to support detailed post-attack

analysis



If you're responsible for protecting Windows systems, firewalls and anti-virus

aren't enough anymore. You also need to master incident response, recovery, and

auditing. Onlyone book has the information you need: Windows Forensics and

Incident Recovery.



Table of Contents

Ch. 1 Introduction 1

Ch. 2 How incidents occur 23

Ch. 3 Data hiding 55

Ch. 4 Incident preparation 105

Ch. 5 Incident response tools 179

Ch. 6 Developing a methodology 259

Ch. 7 Knowing what to look for 307

Ch. 8 Using the forensic server project 357

Ch. 9 Scanners and sniffers 389

App. A Installing Perl a Windows 417



Product Details



* ISBN: 0321200985

* ISBN-13: 9780321200983

* Format: Paperback, 460pp

* Publisher: Addison-Wesley

* Pub. Date: July 2004

Disclaimer:
Contents of this page are indexed from the Internet. All actions are under your responsability. Email us to report illegal contents or external links and we'll remove them immediately.

Download links for "Windows Forensics and Incident Recovery":


How to Download
You may need eMule or Bittorrent to download ebook torrents or emule links.

Report Dead Link
Please leave a comment to report dead links, so that someone else may update new links.

1. Ebooks list page : 1526
2. Windows Forensics and Incident Recovery
3. Windows Forensics And Incident Recovery
4. Windows Forensics and Incident Recovery
5. Windows Forensics and Incident Recovery
6. Windows Forensics and Incident Recovery
7. Windows Forensics and Incident Recovery
8. Windows Forensics and Incident Recovery
9. Windows Forensics and Incident Recovery
10. Windows Forensics and Incident Recovery
11. Windows.Forensics.and.Incident.Recovery
12. Windows Forensics and Incident Recovery
13. Windows Forensics and Incident Recovery Jul 2004
14. Windows Forensics and Incident Recovery
15. Incident.Response.and.Computer.Forensics.Second.Edition
16. Incident Response and Computer Forensics Second Edition