内存取证艺术
The Art of Memory Forensics
Andrew Case、Michael Hale Ligh、Jamie Levy、Aaron Walters · 初版 2014 年
2人推荐
3位读者提及
3次提及
Hacker News 上怎么说
正在加载完整评论……
The Art of Memory Forensics
Andrew Case、Michael Hale Ligh、Jamie Levy、Aaron Walters · 初版 2014 年
正在加载完整评论……
虽然你的评论大部分我都赞同，但我觉得《内存取证的艺术》（The Art of Memory Forensics）绝对是想从事数字取证的人的必读之作。对于担心留下痕迹的攻击者来说也是如此……《软件安全评估的艺术》（The Art of Software Security Assessment）是一本好书，但……
While I agree with most of your comment, I think The Art of Memory Forensics is an absolute must read for the people that want to do digital forensics. Or attackers worrying about the footprint they leave behind... The Art of Software Security Assessment is a great book, but…
他的评论很棒，但我不太赞同他对《内存取证的艺术》（The Art of Memory Forensics）的评价。这本书基本上就是教你怎么用 volatility 来做内存取证。如果你想学这个，那它绝对是最好的学习途径之一。然而，如果你想要一种更具通用性、不依赖特定工具的方法……
His comment was excellent, but I kind of disagree with his comment on The Art of Memory Forensics. Its basically a book about learning to use volatility to perform memory forensics. If you want to do that, its one of the best ways to learn. However, if you want a more general, non-tool based approach…
……也就是“哇塞，真不敢相信居然发生了这种事”。这本书本身并不差，只是对于很多技术安全领域来说没什么太大帮助。如果你感兴趣，那就读；不感兴趣就跳过。2. 《内存取证的艺术》（The Art of Memory Forensics）——与其读这本，不如考虑读读《软件安全评估的艺术》（The Art of Software Security Assessment，内容更严谨深入）或者《恶意代码分析实战》（Practical Malware Analysis）。3. 《欺骗的艺术》（The Art of Deception）——参见上面关于社会工程学的内容。……
…i.e. "Wow I can't believe that happened." It's not a bad book, per se, it's just not particularly helpful for a lot of technical security. If it interests you, read it; if it doesn't, skip it. 2. The Art of Memory Forensics - Instead of reading this, consider reading The Art of Software Security Assessment (a more rigorous coverage) or Practical Malware Analysis. 3. The Art of Deception - See above for Social Engineering.…