A computer forensics "how-to" for fighting malicious code and analyzing incidents With our ever-increasing reliance on computers comes an ever-growing risk of malware. Security professionals will find plenty of solutions in this book to the problems posed by viruses, Trojan horses, worms, spyware, rootkits, adware, and other invasive software. Written by well-known malware experts, this guide reveals solutions to numerous problems and includes a DVD of custom programs and tools that illustrate the concepts, enhancing your skills. Security professionals face a constant battle against malicious software; this practical manual will improve your analytical capabilities and provide dozens of valuable and innovative solutions Covers classifying malware, packing and unpacking, dynamic malware analysis, decoding and decrypting, rootkit detection, memory forensics, open source malware research, and much more Includes generous amounts of source code in C, Python, and Perl to extend your favorite tools or build new ones, and custom programs on the DVD to demonstrate the solutions
"Malware Analyst's Cookbook" is indispensible to IT security administrators, incident responders, forensic analysts, and malware researchers.
The content of the book is very well organized. It can be a good starting point for someone who is new to Malware analysis but it might fall short of expectations for experienced people. The reason is because the major content of the book revolves around using different tools to perform certain task. The book could have reached to an advance level by detailing the last few chapters involving static analysis, debugging etc.
long and informative journey through this guide, can't find better technical book when it comes to the nice blend between theory and practice. It dives deep into the detailed (static and dynamic) analysis of malware despite the platform. Discusses diversity of tools utilized across the security field including, forensics, pen testing and analysis. Provides specialists with recipes of how-to and do-to. In short, amazing and highly recommended.
Overall it was a really good book but the last couple of chapters focus completely on volatility and not too well if you want better understanding of memory forensics including malware just look at the book the Art of Memory Forensics
Excellent book on malware analysis and techniques. The DVD that comes with it is incredibly helpful as well due to the amount of time that it saves inputting code for analysis.