Elsevier Science & Technology Books | ISBN-13: 9781597492690 | English | PDF | Pages: 244 | Size: 5.06 MB

Introduction
This book addresses topics in the area of forensic analysis of systems running on variants of the UNIX operating system, which is the choice of hackers for their attack platforms. According to a 2007 IDC report, UNIX servers account for the second-largest segment of spending (behind Windows) in the worldwide server market with $4.2 billion in 2Q07, representing 31.7% of corporate server spending. UNIX systems have not been analyzed to any significant depth largely due to a lack of understanding on the part of the investigator, an understanding and knowledge base that has been achieved by the attacker. The companion DVD provides a simulated or "live" UNIX environment where readers can test the skills they've learned in the book and use custom tools developed by the authors.

Table Of Contents

Chapter 1 Introduction. 1
Chapter 2 Understanding Unix. 9
Chapter 3 Live Response: Data Collection. 39
Chapter 4 Initial Triage and Live Response: Data Analysis . 71
Chapter 5 The Hacking Top 10. 99
Chapter 6 The /Proc File System. 153
Chapter 7 File Analysis . 169
Chapter 8 Malware. 183
Appendix Implementing Cybercrime Detection Techniques on Windows and *nix. 195
Index. 229