Rootkit arsenal
by Bill Blunden · first published 2012
5mentions
3recommended by
4HN commenters
2016–2024first – last mentioned
75% recommend25% neutral
While forensic analysis has proven to be a valuable investigative tool in the field of computer security, utilizing anti-forensic technology makes it possible to maintain a covert operational foothold for extended periods, even in a high-security environment. Adopting an approach that favors full disclosure, the updated Second Edition of The Rootkit Arsenal presents the most accessible, timely, and complete coverage of forensic countermeasures. This book covers more topics, in greater depth, than any other currently available. In doing so the author forges through the murky back alleys of the
Affiliate links. As an Amazon Associate I earn from qualifying purchases.
I used to work in the field and it's a great book. Highly recommend. Another one I like to recommend is Reverend Bill Blunden's The Rootkit Arsenal. Don't overlook having a deep knowledge of Windows Internals either. That book series is almost criminally overlooked by people who work on supporting it. Also the IDA Pro book. Damn, I wish I could…
on “Building a Home Lab to Become a Malware Hunter – A Beginner’s Guide” ↗I read The Rootkit Arsenal[0] while I was taking my first assembly language course and operating systems class. The author did an amazing job of making the material interesting, approachable, and as clear as machine code hex can…
on “Ask HN: Do you recall any book or course that made a topic finally click?” ↗Seconding Practical Malware Analysis and adding a write-in for The Rootkit Arsenal, which is a very practical guide and walkthrough for building functional rootkits. I picked up the IDA Pro book on a sweet deal before getting an IDA Pro license and it just makes me sad, since I don't…
on “Cybersecurity Humble Book Bundle” ↗The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System. The chapter 3 is a good introduction to computer architecture and how it relates to the OS. Structured Computer Organization by Tanenbaum. This…
on “Ask HN: Do you recall any book or course that made a topic finally click?” ↗Is this true for technical books? I can't imagine that a book like Practical Malware Analysis or The Rootkit Arsenal would ever be "wildly popular". If publishers like O'Reilly were operating on this model then why would they ever publish any books on any niche subject? Surely they would only ever publish books targeted…
on “Making a living by writing is as rare as being a billionaire” ↗