3 options
Perl scripting for windows security : live response, forensic analysis, and monitoring / Harlan Carvey ; [Dave Kleiman, technical editor ; contributing author, Jeremy Faircloth.
- Format:
- Book
- Author/Creator:
- Carvey, Harlan A.
- Language:
- English
- Subjects (All):
- Microsoft Windows (Computer file).
- Perl (Computer program language).
- Computer programming.
- Physical Description:
- 1 online resource (221 p.)
- Edition:
- 1st edition
- Place of Publication:
- Burlington, MA : Syngress, c2007.
- Language Note:
- English
- System Details:
- text file
- Summary:
- This book is intended for anyone who has an interest in useful Perl scripting, in particular on the Windows platform, for the purpose of incident response, and forensic analysis, and application monitoring. While a thorough grounding in scripting languages (or in Perl specifically) is not required, it is helpful in fully and more completely understanding the material and code presented in this book. This book contains information that is useful to consultants who perform incident response and computer forensics, specifically as those activities pertain to MS Windows systems (Windows 2000, XP,
- Contents:
- Front Cover; Perl Scripting for Windows Security: Live Response, Forensic Analysis, and Monitoring; Copyright Page; Dedication Page; Author; Technical Editor; Contributing Author; Contents; Preface; Author Acknowledgements; Part I: Perl Scripting and Live Response; Built-in Functions; Win32.pl; Pclip.pl; Running Processes; Netstat1.pl; Netstat2.pl; Netstat3.pl; Accessing the API; Getsys.pl; WMI; Fw.pl; Nic.pl; Ndis.pl; Di.pl; Ldi.pl; Accessing the Registry; Bho.pl; Uassist.pl; ProScripts; Acquire1.pl; Final Touches; Part II: Perl Scripting and Computer Forensic Analysis; Log Files
- Parsing Binary FilesLslnk.pl; Registry; SAMParse.pl; SECParse.pl; Recentdocs.pl; UAssist.pl; Event Logs; Evt2xls.pl; Parsing RAM Dumps; Lsproc.pl; Lspi.pl; ProScripts; Uassist.pl; SysRestore.pl; Prefetch.pl; Parsing Other Data; Cc-sort.pl; Final Touches; Part III: Monitoring Windows Applications with Perl; In This Toolbox; Core Application Processes; Monitoring System Key Performance Indicators; Monitoring System CPU Utilization; Monitoring System Memory Utilization; Monitoring System Network Utilization; Monitoring a Core Application Process
- Monitoring Process Availability a Specific ProcessMonitoring CPU Utilization for a Specific Process; Monitoring Memory Utilization for a Specific Process; Setting and Using Thresholds; Loading an XML Configuration File; Evaluating Thresholds; Taking Action; Putting it all Together; Core Application Dependencies; Monitoring Remote System Availability; Monitoring Available Disk Space; Monitoring Remote Disk Availability; Monitoring Remote Databases; Monitoring Other Dependencies; Web Services; Monitoring Web Service Availability; Monitoring Web Service Functionality
- Building a Monitoring SystemSummary; Index
- Notes:
- Description based upon print version of record.
- Includes bibliographical references and index.
- ISBN:
- 9786611145132
- 9781281145130
- 1281145130
- 9780080555638
- 0080555632
- OCLC:
- 476128705
The Penn Libraries is committed to describing library materials using current, accurate, and responsible language. If you discover outdated or inaccurate language, please fill out this feedback form to report it and suggest alternative language.