Linux Malware Incident Response: A Practitioner's Guide to Forensic Collection and Examination of Volatile Data: An Excerpt from Malware Forensic Field Guide for Linux Systems (Paperback)

Linux Malware Incident Response is a "first look" at the Malware Forensics Field Guide for Linux Systems, exhibiting the first steps in investigating Linux-based incidents. The Syngress Digital Forensics Field Guides series includes companions for any digital and computer forensic investigator and analyst. Each book is a "toolkit" with checklists for specific tasks, case studies of difficult situations, and expert analyst tips. This compendium of tools for computer forensics analysts and investigators is presented in a succinct outline format with cross-references to supplemental appendices. It is designed to provide the digital investigator clear and concise guidance in an easily accessible format for responding to an incident or conducting analysis in a lab.

• Presented in a succinct outline format with cross-references to included supplemental components and appendices
• Covers volatile data collection methodology as well as non-volatile data collection from a live Linux system
• Addresses malware artifact discovery and extraction from a live Linux system

《Linux惡意軟體事件回應》是《Linux系統惡意軟體取證指南》的首次介紹，展示了調查基於Linux的事件的第一步。Syngress數位取證指南系列包括任何數位和電腦取證調查員和分析師的伴侶。每本書都是一個具有特定任務檢查清單、困難情況案例研究和專家分析師提示的「工具包」。這本電腦取證分析師和調查員的工具彙編以簡潔的大綱格式呈現，並附有相關附錄的交叉參考。它旨在以易於存取的格式，為數位調查員提供清晰簡明的指導，以應對事件回應或在實驗室進行分析。

• 以簡潔的大綱格式呈現，並附有相關附錄的交叉參考


• 涵蓋從運行中的Linux系統收集揮發性數據的方法，以及非揮發性數據的收集


• 探討從運行中的Linux系統中發現和提取惡意軟體證據