Everand Logo

Welcome to Everand!

  • Discover millions of ebooks, audiobooks, and so much more with a free trial

    Only $11.99/month after trial. Cancel anytime.

    UNIX and Linux Forensic Analysis DVD Toolkit
    UNIX and Linux Forensic Analysis DVD Toolkit
    UNIX and Linux Forensic Analysis DVD Toolkit
    Ebook193 pages4 hours

    UNIX and Linux Forensic Analysis DVD Toolkit

    By Chris Pogue, Cory Altheide and Todd Haverkos

    ()

    Read preview

    About this ebook

    This book addresses topics in the area of forensic analysis of systems running on variants of the UNIX operating system, which is the choice of hackers for their attack platforms. According to a 2007 IDC report, UNIX servers account for the second-largest segment of spending (behind Windows) in the worldwide server market with $4.2 billion in 2Q07, representing 31.7% of corporate server spending. UNIX systems have not been analyzed to any significant depth largely due to a lack of understanding on the part of the investigator, an understanding and knowledge base that has been achieved by the attacker.

    The book begins with a chapter to describe why and how the book was written, and for whom, and then immediately begins addressing the issues of live response (volatile) data collection and analysis. The book continues by addressing issues of collecting and analyzing the contents of physical memory (i.e., RAM). The following chapters address /proc analysis, revealing the wealth of significant evidence, and analysis of files created by or on UNIX systems. Then the book addresses the underground world of UNIX hacking and reveals methods and techniques used by hackers, malware coders, and anti-forensic developers. The book then illustrates to the investigator how to analyze these files and extract the information they need to perform a comprehensive forensic analysis. The final chapter includes a detailed discussion of loadable kernel Modules and malware.

    Throughout the book the author provides a wealth of unique information, providing tools, techniques and information that won't be found anywhere else.

    • This book contains information about UNIX forensic analysis that is not available anywhere else. Much of the information is a result of the author's own unique research and work.
    • The authors have the combined experience of law enforcement, military, and corporate forensics. This unique perspective makes this book attractive to all forensic investigators.
    LanguageEnglish
    PublisherElsevier Science
    Release dateJul 24, 2008
    ISBN9780080879123
    UNIX and Linux Forensic Analysis DVD Toolkit
    Author

    Chris Pogue

    Chris Pogue has spent the past five years as part of the IBM Ethical Hacking Team. He was tasked with emulating the actions of an actual malicious attacker with the intention of assisting customers to identify and eliminate probable attack vectors. Chris has worked on over 3000 exploitation attempts for both internal IBM systems as well as third party customers. Chris is also a former US Army Warrant Officer and has worked with the Army Reserve Information Operations Command (ARIOC) on Joint Task Force (JTF) missions with the National Security Agency (NSA), Department of Homeland Security, Regional Computer Emergency Response Team-Continental United States (RCERT-CONUS), and the Joint Intelligence Center-Pacific (JICPAC). Chris attended Forensics training at Carnegie Mellon University in Pittsburgh, Pennsylvania, and holds a Master’s degree in Information Security. He is a Certified Information Systems Security Professional (CISSP) and a Certified Ethical Hacker (CEH). Chris also holds a Top Secret (TS) security clearance from the Department of Defense.

    Related to UNIX and Linux Forensic Analysis DVD Toolkit

    Related ebooks

    Security For You

    View More
    View More

    Related podcast episodes

    Related articles

    • Article

      At War In The Cyber World

      Oct 30, 2019

      At War In The Cyber World
      5 min read

    • Article

      How To Run Classic Distros With QEMU

      Aug 24, 2021

      Back in the late 1990s this author chose their PC magazines by what was on the cover disc, something that had started back in their Amiga days. One month they chose a PC magazine that had something called Red Hat Linux on the second disc which was pr

      8 min read

    • Article

      Kernel Watch

      Sep 21, 2021

      Linus Torvalds announced the release of Linux 5.14, which came mere days after the 30th birthday of his very first Linux announcement. The new kernel includes features such as “core scheduling” (a defence against speculation attacks that span multipl

      2 min read

    • Article

      Rocky Linux

      Jun 29, 2021

      Rocky Linux
      4 min read

    • Article

      What We Know – And Still Don’t – About The Worst-ever US Government Cyber-attack

      Dec 19, 2020

      Nearly a week after the US government announced that multiple federal agencies had been targeted by a sweeping cyber-attack, the full scope and consequences of the suspected Russian hack remain unknown. Key federal agencies, from the Department of Ho

      5 min read

    • Article

      Keys And Signatures

      Mar 9, 2021

      Keys And Signatures
      4 min read

    • Article

      Answers

      May 30, 2023

      Answers
      8 min read

    • Article

      The Default Applications

      Mar 8, 2022

      The Default Applications
      1 min read

    • Article

      Get Into Coding!

      Aug 23, 2022

      Get Into Coding!
      1 min read

    • Article

      AccuWeb Hosting

      Jan 9, 2024

      AccuWeb Hosting
      2 min read

    • Article

      All About Firewalls

      Jan 13, 2020

      All About Firewalls
      4 min read

    • Article

      Use Home Assistant NodeRED devices

      May 31, 2022

      NodeRED is an open source graphical programming environment that can be used to complete a large number of tasks. Graphical programming languages tend to be more intuitive than textual programming languages and can be easier to learn. Support is buil

      5 min read

    • Article

      Doctor

      Feb 1, 2022

      Doctor
      6 min read

    • Article

      Tsurugi Linux 2019.1

      Sep 24, 2019

      Tsurugi Linux 2019.1
      2 min read

    • Article

      With Ransomware Attacks Multiplying, US Moves To Bolster Defenses

      Jul 6, 2021

      As the private sector fends off more ransomware attacks, the federal government’s stepped-up efforts include the first national cyber director.

      4 min read

    • Article

      Administer Servers With Your Browser

      May 4, 2021

      What’s the best way to administer your headless server remotely from another machine inside your local network? You can al ways ssh in of course, but a friendlier approach will give you access to key metrics as well as the ability to perform various

      7 min read

    Related categories

    Reviews for UNIX and Linux Forensic Analysis DVD Toolkit

    0 ratings

    0 ratings0 reviews

    What did you think?

    Tap to rate

    Review must be at least 10 words

      Book preview

      UNIX and Linux Forensic Analysis DVD Toolkit - Chris Pogue

      Enjoying the preview?
      Page 1 of 1