Incident Response and Computer Forensics, Second Edition
by Chris Prosise, Kevin Mandia, Matt Pepe

List Price: $49.99
Our Price: $23.99
You Save: $26.00 (52%)
Availability: Usually ships in 1-2 business days
Buy Used: from $20.97 (click here)
Category: Book
See more book details and other editions

Book Summary Information

Book Reviews of Incident Response and Computer Forensics, Second Edition

Book Review: You must buy...
Summary: 5 Stars

Summary of Incident Response and Computer Forensics, Second Edition

Anti-attack procedures are presented with the goal of identifying, apprehending, and successfully prosecuting attackers. The advice on carefully preserving volatile information, such as the list of processes active at the time of an attack, is easy to follow. The book is quick to endorse tools, the functionalities of which are described so as to inspire creative applications. Information on bad-guy behavior is top quality as well, giving readers knowledge of how to interpret logs and other observed phenomena. Mandia and Prosise don't--and can't--offer a foolproof guide to catching crackers in the act, but they do offer a great "best practices" guide to active surveillance. --David Wall

Topics covered: Monitoring computer systems for evidence of malicious activity, and reacting to such activity when it's detected. With coverage of Windows and Unix systems as well as non-platform-specific resources like Web services and routers, the book covers the fundamentals of incident response, processes for gathering evidence of an attack, and tools for making forensic work easier.

Network Security Books

• Computers & Internet > Networking
• Networks, Protocols & APIs > General
• Programming > Software Design, Testing & Engineering > Software Development
• General
• General
• Software
• Law > Criminal Law > Criminal Procedure
• Nonfiction > True Accounts > True Crime
• Professional & Technical > Law > Criminal Law > Criminal Procedure
• Business & Investing > Industries & Professions > E-commerce > General