Malware Forensics Field Guide for Windows Systems by Cameron H. Malin & Eoghan Casey & James M. Aquilina

Author:Cameron H. Malin & Eoghan Casey & James M. Aquilina
Language: eng
Format: epub
ISBN: 9781597494731
Publisher: Elsevier Inc.
Published: 2012-05-18T16:00:00+00:00

After extracting the suspicious file from the system, determining its purpose and functionality is often a good starting place. This process, called file profiling, should answer the following questions:

• What type of file is it?

• What is the intended purpose of the file?

• What is the functionality and capability of the file?

• What does the file suggest about the sophistication level of the attacker?

• What is the target of the file—is it customized to the victim system/network or a general attack?

• What affect does this file have on the system?

• What is the extent of the infection or compromise on the system or network?

• What remediation steps are necessary because the file exists on the system?

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.