Accelerated Windows Malware Analysis with Memory Dumps: Training Course Transcript and Windbg Practice Exercises
Author: Dmitry Vostokov (Author), Software Diagnostics Services (Author)
Publisher finelybook 出版社: Opentask
Publication Date 出版日期: 2013-03-01
Language 语言: English
Print Length 页数: 234 pages
ISBN-10: 190804344X
ISBN-13: 9781908043443
Book Description
Learn how to navigate process, kernel and physical spaces and diagnose various malware patterns in Windows memory dump files. We use a unique and innovative pattern-driven analysis approach to speed up the learning curve. The training consists of practical step-by-step hands-on exercises using WinDbg, process, kernel and complete memory dumps. Covered more than 20 malware analysis patterns. The main audience are software technical support and escalation engineers who analyze memory dumps from complex software environments and need to check for possible malware presence in cases of abnormal software behavior. The course will also be useful for software engineers, quality assurance and software maintenance engineers, security researchers and malware analysts who have never used WinDbg for analysis of computer memory.
