Malware Forensics Field Guide for Windows Systems

Malware Forensics Field Guide for Windows Systems is a hand-held companion for computer forensic investigators, incident responders and malware analysts that distill the formalized methods introduced in the authors' previous work, Malware Forensics, and presents the new forensic concepts of digital impression and trace evidence, along with advanced profiling techniques based in malware taxonomy and phylogeny.

Presented in succinct outline format with cross-references to supplemental components and appendices, this tactical and practical resource is designed to provide the digital investigator clear and concise guidance in an easily accessible format while responding to an incident or conducting analysis in a lab.

Presents tools and on-the-job tasks in an easy-to-use hand-held guide

Discusses how to collect and examine volatile data from Windows systems

Provides specific techniques for profiling suspect files

Addresses the legal concerns often encountered on-site

Includes templates and quick references for use in the field

Dedicated Web site (www.malwarefieldguide.com) keeps readers up-to-date with the latest tools and resources