Rating:
Author: Bill Blunden
ISBN : B007RFXBZM
New from $27.43
Format: PDF, EPUB
Free download Free The Rootkit Arsenal: Escape and Evasion [Kindle Edition] for everyone book 4shared, mediafire, hotfile, and mirror link With the growing prevalence of the Internet, rootkit technology has taken center stage in the battle between White Hats and Black Hats. Adopting an approach that favors full disclosure, The Rootkit Arsenal presents the most accessible, timely, and complete coverage of rootkit technology. This book covers more topics, in greater depth, than any other currently available. In doing so, the author forges through the murky back alleys of the Internet, shedding light on material that has traditionally been poorly documented, partially documented, or intentionally undocumented.Books with free ebook downloads available Free The Rootkit Arsenal: Escape and Evasion [Kindle Edition]
- File Size: 11561 KB
- Print Length: 908 pages
- Publisher: Jones & Bartlett Learning; 1 edition (June 23, 2009)
- Sold by: Amazon Digital Services, Inc.
- Language: English
- ASIN: B007RFXBZM
- Text-to-Speech: Enabled
X-Ray:
- Lending: Not Enabled
- Amazon Best Sellers Rank: #900,171 Paid in Kindle Store (See Top 100 Paid in Kindle Store)
Free The Rootkit Arsenal: Escape and Evasion
Bill Blunden's book, The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System, is one of the hidden gems out there as far as computer security books are concerned, and I hope that I can convince you to give it a look. This review has been too-long to arrive, as I haven't had the time to read that I would like. That said, I felt it was very important to finally get the review up, as this is a book that I'm sure my regular readers will enjoy.
I first spotted this book on a vendor table at Defcon, and it stood out among the rest mostly because *I hadn't heard of it*. I try to keep up with new book releases, especially on attack-oriented topics that would be of interest to the penetration testers and vulnerability analysts that read this blog. It was surprising to me that one had flown under the radar. I picked it up and flipped through the table of contents [...] (which I encourage you to do as well), and was very impressed with the amount of material it covers.
I looked up the author, and was disappointed to realize that I had missed his talk at Blackhat earlier that week (looking forward to the video). I contacted him, and he was kind enough to supply a review copy of the book. It arrived very quickly, with a humorous personal note on the inside cover, and ever since, I have been learning a lot from it.
The author's style is excellent. The material is technical and has the potential to be very dry, but the text has a very conversational tone, as if it were being presented as a lecture for a (particularly good) class. Each concept is tied back to the main topic: hiding operations and data from the user and operating system, and frustrating forensic analysis.
Disclaimer: Bill mentions me and my book "Real Digital Forensics" on pages xxvi and 493. He sent me a free review copy of his book.
"Wow." That summarizes my review of "The Rootkit Arsenal" (TRA) by Bill Blunden. If you're a security person and you plan to read one seriously technical book this year, make it TRA. If you decide to really focus your attention, and try the examples in the book, you will be able to write Windows rootkits. Even without taking a hands-on approach, you will learn why you can't trust computers to defend themselves or report their condition in a trustworthy manner.
Author Bill Blunden is an excellent technical writer. He keeps the reader's attention despite the mind-numbing complexity of some of his topics. He also provides exceptional background material and knows how to lead the reader through a series of learning sessions prior to directly addressing writing rootkits. Thanks to this progressive method, the reader acquires a thorough grounding in a variety of topics neglected by other texts. I highly recommend reading this book prior to other books on rootkits, although motivated readers might want to read books like Windows Internals, 5th Ed, prior to TRA.
I especially appreciated Bill's practical approach; he frequently shares tips to solve problems readers will encounter. For example, he describes how to access Microsoft symbols via a remote symbol server, rather than just downloading outdated symbols to a local system. He also explained how to set up a remote kernel debugger using a null modem.
Two other aspects of TRA made an impression on me. Bill very thoroughly discusses Windows and rootkit technology. He outlines numerous options, then examines the pros and cons of each technique.
-
Download Link 2