PowerShell for Malware Incident Response

This book is designed for security professionals who work in an internal IT department. Its main aim is to outline a modern approach to malware live response and malware forensics which matches the other demands of the job. It is essentially a technical book – but it does cover some theory.

The book covers:
• Traditional forensics theory and methods
• Incident response
• Basic malware forensics – showing the use of typical tools through the classic stages
• A set of PowerShell tools – The PoShFoto toolkit available on “packetstorm”.
• An end-to-end worked example covering the analysis of a common malware attack – the components written by the author are fully available so you use them for practice or in your own basic training course.
• A programmer’s side view of the malware used in the tutorial. This will allow you build your own training exercise using the components written by the author.