Perl Scripting for Windows Security: Live Response, Forensic Analysis, and Monitoring

ISBN-10: 0080555632
ISBN-13: 9780080555638
Category: Computers
Pages: 232
Language: English
Published: 2011-04-18
Publisher: Elsevier
Author: Harlan Carvey

Description

I decided to write this book for a couple of reasons. One was that I’ve now written a couple of books that have to do with incident response and forensic analysis on Windows systems, and I used a lot of Perl in both books. Okay...I’ll come clean...I used nothing but Perl in both books! What I’ve seen as a result of this is that many readers want to use the tools, but don’t know how...they simply aren’t familiar with Perl, with interpreted (or scripting) languages in general, and may not be entirely comfortable with running tools at the command line. This book is intended for anyone who has an interest in useful Perl scripting, in particular on the Windows platform, for the purpose of incident response, and forensic analysis, and application monitoring. While a thorough grounding in scripting languages (or in Perl specifically) is not required, it helpful in fully and more completely understanding the material and code presented in this book. This book contains information that is useful to consultants who perform incident response and computer forensics, specifically as those activities pertain to MS Windows systems (Windows 2000, XP, 2003, and some Vista). My hope is that not only will consultants (such as myself) find this material valuable, but so will system administrators, law enforcement officers, and students in undergraduate and graduate programs focusing on computer forensics. *Perl Scripting for Live Response Using Perl, there’s a great deal of information you can retrieve from systems, locally or remotely, as part of troubleshooting or investigating an issue. Perl scripts can be run from a central management point, reaching out to remote systems in order to collect information, or they can be "compiled" into standalone executables using PAR, PerlApp, or Perl2Exe so that they can be run on systems that do not have ActiveState’s Perl distribution (or any other Perl distribution) installed. *Perl Scripting for Computer Forensic Analysis Perl is an extremely useful and powerful tool for performing computer forensic analysis. While there are applications available that let an examiner access acquired images and perform some modicum of visualization, there are relatively few tools that meet the specific needs of a specific examiner working on a specific case. This is where the use of Perl really shines through and becomes apparent. *Perl Scripting for Application Monitoring Working with enterprise-level Windows applications requires a great deal of analysis and constant monitoring. Automating the monitoring portion of this effort can save a great deal of time, reduce system downtimes, and improve the reliability of your overall application. By utilizing Perl scripts and integrating them with the application technology, you can easily build a simple monitoring framework that can alert you to current or future application issues.

Get the book

Similar books

Learning Perl on Win32 Systems
By Erik Olson, Randal L. Schwartz, Tom Christiansen
An introduction to Perl, including tips for PC users and NT-specific examples.
Win32 Perl Programming: The Standard Extensions
By Dave Roth
This book is a guide to Perl¿s most common Win32 extensions, grouped by their functionality. The new edition updates coverage from Perl 5.05 to current Perl version 5.6.
The Art of Software Security Testing: Identifying Software Security Flaws
By Elfriede Dustin, Chris Wysopal, Lucas Nelson
State-of-the-Art Software Security Testing: Expert, Up to Date, and Comprehensive The Art of Software Security Testing delivers in-depth, up-to-date, battle-tested techniques for anticipating and identifying software security problems ...
The Executive MBA in Information Security
By Jr., John J. Trinckes
Currently, he runs an independent computer forensics company, DaveKleiman. com, which specializes in litigation ... ISBN: 978-1-59749-042-9), and How to Cheat at Windows System Administration: Using Command Line Scripts (Syngress ...
Advanced Perl Programming
By Sriram Srinivasan
Covers advanced features of Perl, how the Perl interpreter works, and presents areas of modern computing technology such as networking, user interfaces, persistence, and code generation.
Microsoft Office FrontPage 2003 Bible
By Curt Simmons
Occasionally, you may find that linking a Web page to more than one style sheet is useful. ... Your objective is to create the FAQ page for a newsletter that includes all of the basic elements of a newsletter as well as a stylish banner ...
The Official (ISC)2 Guide to the SSCP CBK
By Adam Gordon, Steven Hernandez
Endorsed by (ISC)2 and compiled and reviewed by SSCPs and subject matter experts, this book brings together a global, thorough perspective to prepare candidates for the SSCP exam, ans also provides a reference that will serve them well into ...
Programming Perl
By Larry Wall, Randal L. Schwartz
Software -- Operating Systems.
Windows 98 Annoyances
By David Karp
A guide to the failings of Windows 98 explains how to customize the system so as to avoid the inconvenience of software applications that overwrite file associations, repetitive warning screens, and unused icons crowding the desktop
Perl for Oracle DBAs: Perl Scripts, Applications & Tips for Database Administrators
By Andy Duncan, Jared Still
Perl Scripts, Applications & Tips for Database Administrators Andy Duncan, Jared Still. 9 Oracle/ Perl ... Perl is a very powerful tool for Oracle database administration, but too few DBAs realize how helpful Perl can be in managing, ...