MALWARE FORENSICS

Malware Forensics: Investigating and Analyzing Malicious Code, published by Syngress/Elsevier, covers the emerging field of live digital forensics, where investigators examine computers and networks systems to collect and preserve critical data during a live incident that may be lost if the system is shut down or immediately remediated. The book's content focuses on identifying and capturing malicious code and relevant evidence of its effect on the compromised system by using live forensics and evidence collection methodologies applicable to Windows and Linux operating systems. The book also provides clear and concise guidance on how to forensically capture and examine physical and process computer memory as a key investigative step in malicious code forensics. Further, Malware Forensics provides deep coverage on "file profiling," or the preliminary analysis of suspect file, as well as dynamic and static analysis of a malware specimen. Finally, the book covers the legal ramifications..