Windows Forensics and Incident Recovery

Harlan Carvey

460 pages, parution le 14/09/2004

Ajouter à une liste

Indisponible

Résumé

If you're responsible for protecting Windows systems, firewalls and anti-virus aren't enough anymore. You also need to master incident response, recovery, and auditing. Leading Windows security expert and instructor Harlan Carvey offers a start-to-finish guide to the subject: everything administrators must know to recognize and respond to virtually any attack.

Drawing on his widely acclaimed course, Carvey uses real-world examples to cover every significant incident response, recovery, and forensics technique. He delivers a complete toolset that combines today's best open source and freeware tools, his own exclusive software and scripts, and step-by-step instructions for using them. This book's tools and techniques apply to every current and professional version of Windows: NT, 2000, XP, and Windows 2003 Server. Coverage includes:

Developing a practical methodology for responding to potential attacks
Preparing your systems to prevent and detect incidents
Recognizing the signatures of an attack-in time to act
Uncovering attacks that evade detection by Event Viewer, Task Manager, and other Windows GUI tools
Using the Forensic Server Project to automate data collection during live investigations
Analyzing live forensics data in order to determine what occurred

CD-ROM INCLUDED

CD-ROM contains code for incident response and forensics toolkit developed by the author, sample network packet captures, as well as data collected from compromised systems using the Forensic Server Project. You can also access Carvey's website at www.windows-ir.com for code samples, updates, and errata.

Sommaire

Introduction
How Incidents Occur
Data Hiding
Incident Preparation
Incident Response Tools
Developing a Methodology
Knowing What To Look For
Using the Forensic Server Project
Scanners and Sniffers
A: Installing Perl on Windows
B: Web Sites
C: Answers to Chapter 9 Questions

Voir tout

Replier

Caractéristiques techniques

	PAPIER
Éditeur(s)	Addison Wesley
Auteur(s)	Harlan Carvey
Parution	14/09/2004
Nb. de pages	460
Format	17,5 x 23,5
Couverture	Broché
Poids	935g
Intérieur	Noir et Blanc
EAN13	9780321200983
ISBN13	978-0-321-20098-3

Avantages Eyrolles.com

Livraison à partir de 0,01 € en France métropolitaine

Paiement en ligne SÉCURISÉ

Livraison dans le monde

Retour sous 15 jours

+ d'un million et demi de livres disponibles

Windows Forensics and Incident Recovery

Résumé

Sommaire

Caractéristiques techniques

Consultez aussi