Ligh Michael Hale. <br/><br/>
The Art of Memory Forensics :  Detecting Malware and Threats in Windows, Linux, and Mac Memory  
 Detecting Malware and Threats in Windows, Linux, and Mac Memory 

 - Indianapolis  John wiley& Sons  2014 
 - xxiii, 886 pages :  illustrations ; 
<br/><br/>Includes index. 
<br/><br/>Machine generated contents note: 1.Systems Overview -- Digital Environment -- PC Architecture -- Operating Systems -- Process Management -- Memory Management -- File System -- I/O Subsystem -- Summary -- 2.Data Structures -- Basic Data Types -- Summary -- 3.The Volatility Framework -- Why Volatility? -- What Volatility Is Not -- Installation -- The Framework -- Using Volatility -- Summary -- 4.Memory Acquisition -- Preserving the Digital Environment -- Software Tools -- Memory Dump Formats -- Converting Memory Dumps -- Volatile Memory on Disk -- Summary -- 5.Windows Objects and Pool Allocations -- Windows Executive Objects -- Pool-Tag Scanning -- Limitations of Pool Scanning -- Big Page Pool -- Pool-Scanning Alternatives -- Summary -- 6.Processes, Handles, and Tokens -- Processes -- Process Tokens -- Privileges -- Process Handles -- Enumerating Handles in Memory -- Summary -- 7.Process Memory Internals -- What's in Process Memory? -- Enumerating Process Memory -- Summary -- Contents note continued: Summary. 
<br/><br/><label>ISBN: </label>9781118825099 
<br/><br/><label>Subjects--Topical Terms: </label><br/>Malware (Computer software)<br/>Computer security.<br/>Computer networks<br/>Computer crimes.<br/>Réseaux informatiques.<br/>Délits informatiques.<br/>Sécurité informatique.<br/>Mémorisation des données.<br/>Computer crimes.<br/>Computer networks<br/>Computer security.<br/>Malware (Computer software)
<br/><br/><label>Dewey Class. No.: </label>005.8  / LIG/A