TY  - BOOK
AU  - Ligh Michael Hale
AU  - Case Andrew
AU  - Levy Jamie
AU  - Walters,Aaron
TI  - The Art of Memory Forensics: Detecting Malware and Threats in Windows, Linux, and Mac Memory 
SN  - 9781118825099
U1  - 005.8 
PY  - 2014///
CY  - Indianapolis
PB  - John wiley& Sons
KW  - Malware (Computer software)
KW  - Computer security
KW  - Computer networks
KW  - Computer crimes
KW  - Réseaux informatiques
KW  - Délits informatiques
KW  - Sécurité informatique
KW  - Mémorisation des données
N1  - Includes index; Machine generated contents note: 1.Systems Overview -- Digital Environment -- PC Architecture -- Operating Systems -- Process Management -- Memory Management -- File System -- I/O Subsystem -- Summary -- 2.Data Structures -- Basic Data Types -- Summary -- 3.The Volatility Framework -- Why Volatility? -- What Volatility Is Not -- Installation -- The Framework -- Using Volatility -- Summary -- 4.Memory Acquisition -- Preserving the Digital Environment -- Software Tools -- Memory Dump Formats -- Converting Memory Dumps -- Volatile Memory on Disk -- Summary -- 5.Windows Objects and Pool Allocations -- Windows Executive Objects -- Pool-Tag Scanning -- Limitations of Pool Scanning -- Big Page Pool -- Pool-Scanning Alternatives -- Summary -- 6.Processes, Handles, and Tokens -- Processes -- Process Tokens -- Privileges -- Process Handles -- Enumerating Handles in Memory -- Summary -- 7.Process Memory Internals -- What's in Process Memory? -- Enumerating Process Memory -- Summary --; Contents note continued: Summary
ER  -