Rootkit 兵工厂
Rootkit arsenal
Bill Blunden · 初版 2012 年
3人推荐
4位读者提及
5次提及
尽管取证分析已被证明是计算机安全领域极有价值的调查工具，但利用 anti-forensic 技术却能使攻击者即便在高度安全的环境中也能长期维持隐蔽的操作据点。更新后的第2版 The Rootkit Arsenal 秉承全面披露的理念，提供了关于取证对抗措施最为通俗易懂、及时且详尽的论述。本书涵盖的主题比目前市面上的任何其他书籍都更广泛、更深入。在此过程中，作者穿行于黑暗隐秘的……
Hacker News 上怎么说
正在加载完整评论……
我以前在这个领域工作过，这是一本好书。强烈推荐。我还想推荐的另一本是比尔·布伦登牧师（Reverend Bill Blunden）的《Rootkit兵法》（The Rootkit Arsenal）。也别忽视对《Windows Internals》的深入了解。那套丛书几乎被做技术支持的人犯罪般地忽视了。还有那本 IDA Pro 的书。靠，真希望我能……
I used to work in the field and it's a great book. Highly recommend. Another one I like to recommend is Reverend Bill Blunden's The Rootkit Arsenal. Don't overlook having a deep knowledge of Windows Internals either. That book series is almost criminally overlooked by people who work on supporting it. Also the IDA Pro book. Damn, I wish I could…
我是在上第一门汇编语言课和操作系统课时读的《Rootkit兵法》（The Rootkit Arsenal）[0]。作者做得太棒了，把内容讲得妙趣横生、通俗易懂，甚至达到了机器码 hex 格式所能达到的极致清晰……
I read The Rootkit Arsenal[0] while I was taking my first assembly language course and operating systems class. The author did an amazing job of making the material interesting, approachable, and as clear as machine code hex can…
附议《恶意软件分析实战》（Practical Malware Analysis），再提一票《Rootkit兵法》（The Rootkit Arsenal），这是一本构建实用 rootkit 的非常接地气的指南和实操攻略。在拿到 IDA Pro 许可证之前，我趁着打折超值入手了那本 IDA Pro 的书，结果反倒让我难过了，因为我根本没……
Seconding Practical Malware Analysis and adding a write-in for The Rootkit Arsenal, which is a very practical guide and walkthrough for building functional rootkits. I picked up the IDA Pro book on a sweet deal before getting an IDA Pro license and it just makes me sad, since I don't…
《Rootkit兵法：在系统幽暗角落逃逸与规避》（The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System）。第 3 章很好地介绍了计算机体系结构及其与操作系统的关系。塔能鲍姆（Tanenbaum）的《结构化计算机组成》（Structured Computer Organization）。这个……
The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System. The chapter 3 is a good introduction to computer architecture and how it relates to the OS. Structured Computer Organization by Tanenbaum. This…
这对技术类书籍也成立吗？我很难想象像《恶意软件分析实战》（Practical Malware Analysis）或者《Rootkit兵法》（The Rootkit Arsenal）这样的书会“极度畅销”。如果像 O'Reilly 这样的出版商是按这种模式运营的，那他们为什么还要出版任何小众领域的书呢？那他们肯定只会出版那些面向……
Is this true for technical books? I can't imagine that a book like Practical Malware Analysis or The Rootkit Arsenal would ever be "wildly popular". If publishers like O'Reilly were operating on this model then why would they ever publish any books on any niche subject? Surely they would only ever publish books targeted…