Reversing: Secrets of Reverse Engineering
'Eldad Eilam-Reversing Secrets of Reverse Engineering-Wiley(2005)' delivers an authoritative, methodical framework for digital evidence acquisition, forensic examination, and cybercrime investigation. Emphasizing legal admissibility, forensic soundess, and rigorous chain of custody, this volume covers the full lifecycle of a digital investigation.
Key topics include physical disk imaging, file system analysis (NTFS, EXT4), Windows artifact examination (Registry, Prefetch, Event Logs), volatile RAM memory capture and analysis, network packet dissection, browser history extraction, and forensic report writing. Workflows utilizing Autopsy, FTK Imager, and EnCase are detailed.
An indispensable handbook for digital forensic examiners, incident response specialists, corporate investigators, and law enforcement analysts.
Key topics include physical disk imaging, file system analysis (NTFS, EXT4), Windows artifact examination (Registry, Prefetch, Event Logs), volatile RAM memory capture and analysis, network packet dissection, browser history extraction, and forensic report writing. Workflows utilizing Autopsy, FTK Imager, and EnCase are detailed.
An indispensable handbook for digital forensic examiners, incident response specialists, corporate investigators, and law enforcement analysts.
Contents at a Glance
Chapter 1: Foundations of Reverse Engineering and Low-Level Code
Chapter 2: Assembly Language Crash Course (x86 and x64 Architecture)
Chapter 3: Disassemblers and Decompilers: IDA Pro, Ghidra, and Binary Ninja
Chapter 4: Static Reversing: Control Flow Graphs and Function Signatures
Chapter 5: Dynamic Reversing: Debuggers, Breakpoints, and Memory Tracing
Chapter 6: Reversing File Formats, Cryptographic Algorithms, and Protocols
Chapter 7: Cracking Protections: Anti-Debugging, Packers, and Obfuscation
Chapter 8: Vulnerability Research: Discovering Zero-Days via Reverse Engineering
Index & Further Reading
Chapter 1: Foundations of Reverse Engineering and Low-Level Code
Chapter 2: Assembly Language Crash Course (x86 and x64 Architecture)
Chapter 3: Disassemblers and Decompilers: IDA Pro, Ghidra, and Binary Ninja
Chapter 4: Static Reversing: Control Flow Graphs and Function Signatures
Chapter 5: Dynamic Reversing: Debuggers, Breakpoints, and Memory Tracing
Chapter 6: Reversing File Formats, Cryptographic Algorithms, and Protocols
Chapter 7: Cracking Protections: Anti-Debugging, Packers, and Obfuscation
Chapter 8: Vulnerability Research: Discovering Zero-Days via Reverse Engineering
Index & Further Reading
