Shop top categories that ship internationally
Similar items shipping to Netherlands
NL
Netherlands
See All Buying Options
Added to

Sorry, there was a problem.

There was an error retrieving your Wish Lists. Please try again.

Sorry, there was a problem.

List unavailable.
Kindle app logo image

Download the free Kindle app and start reading Kindle books instantly on your smartphone, tablet, or computer - no Kindle device required.

Read instantly on your browser with Kindle for Web.

Using your mobile phone camera - scan the code below and download the Kindle app.

QR code to download the Kindle App

  • The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System: Escape and Evasion in the Dark Corners of the System

Follow the author

Get new release updates & improved recommendations
Bill Blunden
Follow
Something went wrong. Please try your request again later.

The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System: Escape and Evasion in the Dark Corners of the System 2nd Edition

by Bill Blunden (Author)
5.0 out of 5 stars (33)
While forensic analysis has proven to be a valuable investigative tool in the field of computer security, utilizing anti-forensic technology makes it possible to maintain a covert operational foothold for extended periods, even in a high-security environment. Adopting an approach that favors full disclosure, the updated Second Edition of The Rootkit Arsenal presents the most accessible, timely, and complete coverage of forensic countermeasures. This book covers more topics, in greater depth, than any other currently available. In doing so the author forges through the murky back alleys of the Internet, shedding light on material that has traditionally been poorly documented, partially documented, or intentionally undocumented. The range of topics presented includes how to: -Evade post-mortem analysis -Frustrate attempts to reverse engineer your command & control modules -Defeat live incident response -Undermine the process of memory analysis -Modify subsystem internals to feed misinformation to the outside -Entrench your code in fortified regions of execution -Design and implement covert channels -Unearth new avenues of attack
Read more
Previous slide of product details
  1. ISBN-10
    144962636X
  2. ISBN-13
    978-1449626365
  3. Edition
    2nd
  4. Publisher
    Jones & Bartlett Learning
  5. Publication date
    March 30, 2012
  6. Language
    English
  7. Dimensions
    5.8 x 1.7 x 8.9 inches
  8. Print length
    784 pages
Next slide of product details

Customers also bought or read

Page 1 of 1Start over
Previous page
  1. Book cover Rootkits and Bootkits: Reversing Modern Malware and Next Generation Threats
    Rootkits and Bootkits: Reversing Modern Malware and Next Generation Threats
    Paperback
    EUR36.13
    EUR 9.08 delivery Fri, May 15
  2. Book cover Rootkits: Subverting the Windows Kernel: Subverting the Windows Kernel
    Rootkits: Subverting the Windows Kernel: Subverting the Windows Kernel
    Paperback
    EUR32.24
    EUR 8.58 delivery May 25 - Jun 5
  3. Book cover Evading EDR: The Definitive Guide to Defeating Endpoint Detection Systems.
    Evading EDR: The Definitive Guide to Defeating Endpoint Detection Systems.
    Paperback
    EUR43.96
    EUR 8.58 delivery Fri, May 15
  4. Book cover Android Hacker's Handbook
    Android Hacker's Handbook
    Paperback
    EUR36.46
    EUR 9.08 delivery Fri, May 15
  5. Book cover Windows Kernel Programming
    Windows Kernel Programming
    Paperback
    EUR32.34
    EUR 9.16 delivery Fri, May 15
  6. Book cover VX Underground Black Mass: Volume 3
    VX Underground Black Mass: Volume 3
    Paperback
    EUR11.41
    EUR 8.16 delivery Fri, May 15
  8. Book cover Hacker's Delight
    Hacker's Delight
    Hardcover
    EUR49.65
    EUR 9.08 delivery Fri, May 15
  10. Book cover Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software
    Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software
    Paperback
    EUR39.52
    EUR 9.16 delivery Fri, May 15
  12. Book cover Android Security Internals: An In-Depth Guide to Android's Security Architecture
    Android Security Internals: An In-Depth Guide to Android's Security Architecture
    Paperback
    EUR35.75
    EUR 9.08 delivery Fri, May 15
  14. Book cover Hacking: The Art of Exploitation, 2nd Edition
    Hacking: The Art of Exploitation, 2nd Edition
    Paperback
    EUR30.72
    EUR 8.81 delivery Fri, May 15
  15. Book cover Exploiting Software: How to Break Code
    Exploiting Software: How to Break Code
    Paperback
    EUR12.97
    EUR 9.08 delivery Mon, May 18
  17. Book cover Extreme Privacy: What It Takes to Disappear
    Extreme Privacy: What It Takes to Disappear
    Paperback
    EUR32.11
    EUR 9.81 delivery Fri, May 15
  18. Book cover Reversing: Secrets of Reverse Engineering
    Reversing: Secrets of Reverse Engineering
    Paperback
    EUR26.71
    EUR 9.16 delivery Fri, May 15
  19. Book cover Code: The Hidden Language of Computer Hardware and Software
    Code: The Hidden Language of Computer Hardware and Software
    Paperback
    EUR27.26
    EUR 8.81 delivery Fri, May 15
  20. Book cover Blue Fox: Arm Assembly Internals and Reverse Engineering
    Blue Fox: Arm Assembly Internals and Reverse Engineering
    Paperback
    EUR27.49
    EUR 8.81 delivery Fri, May 15
Next page
Loading...

Editorial Reviews

About the Author

Bill Blunden (MCSE, MCITP: Enterprise Administrator) began his journey into enterprise computing over ten years ago at an insurance company in Cleveland, Ohio. Gradually forging a westward path to Northern California, he’s worked with ERP middleware, developed code for network security appliances, and taken various detours through academia. Bill is the principal investigator at Below Gotham Labs.

Product details

  • Publisher ‏ : ‎ Jones & Bartlett Learning
  • Publication date ‏ : ‎ March 30, 2012
  • Edition ‏ : ‎ 2nd
  • Language ‏ : ‎ English
  • Print length ‏ : ‎ 784 pages
  • ISBN-10 ‏ : ‎ 144962636X
  • ISBN-13 ‏ : ‎ 978-1449626365
  • Item Weight ‏ : ‎ 2.4 pounds
  • Dimensions ‏ : ‎ 5.8 x 1.7 x 8.9 inches
  • Best Sellers Rank: #694,793 in Books (See Top 100 in Books)
  • Customer Reviews:
    5.0 out of 5 stars (33)

About the author

Follow authors to get new release updates, plus improved recommendations.
Bill Blunden

Bill Blunden

Brief content visible, double tap to read full content.
Full content visible, double tap to read brief content.

Discover more of the author’s books, see similar authors, read book recommendations and more.

Related books

Page 1 of 1Start Over
Sponsored
Previous page
  1. Shop the Store on Amazon ›
    Start. Scale. Exit. Repeat.: Serial Entrepreneurs' Secrets Revealed!
    Start. Scale. Exit. Repeat.: Serial Entrepreneurs' Secrets Revealed!
    4.84.8 out of 5 stars242
    EUR21.32
  2. Shop the Store on Amazon ›
    Learning C# by Developing Games with Unity: Get to grips with coding in C# and build simple 3D games in Unity 2023 from the ground up
    Learning C# by Developing Games with Unity: Get to grips with coding in C# and build simple 3D games in Unity 2023 from the ground up
    4.44.4 out of 5 stars134
    EUR38.39 List:EUR51.19
  3. Shop the Store on Amazon ›
    The 6 Pillars of Decision Making: 65 Techniques & Strategies to Make Smart and Strategic Choices, Quickly. Design the Life That You Want by Taking Calculated Risks Using Data and Logical Judgment
    The 6 Pillars of Decision Making: 65 Techniques & Strategies to Make Smart and Strategic Choices, Quickly. Design the Life That You Want by Taking Calculated Risks Using Data and Logical Judgment
    4.54.5 out of 5 stars86
    EUR15.35
  4. Shop the Store on Amazon ›
    Plan With The End Goal In Mind: How to Define Goals, Build Habits, and Stay Focused for Success
    Plan With The End Goal In Mind: How to Define Goals, Build Habits, and Stay Focused for Success
    4.64.6 out of 5 stars92
    EUR15.35
  5. Shop the Store on Amazon ›
    Strategic Problem Solving: A Step-by-Step Guide to Solve Hard Problems: Leverage Data Analysis and Critical Thinking to Make Smart Decisions, Drive Innovation, and Lead with Confidence
    Strategic Problem Solving: A Step-by-Step Guide to Solve Hard Problems: Leverage Data Analysis and Critical Thinking to Make Smart Decisions, Drive Innovation, and Lead with Confidence
    4.54.5 out of 5 stars391
    EUR15.35
Next page

Customer reviews

5 out of 5 stars
33 global ratings

Top reviews from the United States

  • Idan Bismut
    5.0 out of 5 stars a MUST BUY for everyone that wants to know what going on under the hood in Windows
    Reviewed in the United States on May 11, 2016
    Format: PaperbackVerified Purchase
    Got my copy of the book 3 weeks ago, I have to say this is one of the best books I've read on the subject.
    I recommended buying it to anyone who wish to know how O/S really works & find out about all those little things that makes the 'magic" happens after boot/login.
    The book is NOT for beginners: A prior knowledge of assembly & usage of windows debuggers (such as WinDbg or KD) is recommended.
    I had some experience with both, though I had some "rust", and it took me some time googling to be reminded of some stuff, and I wish author would put some additional chapter to subject early in the book.
    As an small example: In chapter 3, there is a deep dive into working example how one could implement a "key logger" into "real mode" via TSR. It would really help if author would give small "intro" to TSR saying "write' performed by placing 25H to AH, DS:DX point to new routine, AL = N & that will hook the new function to slot N. True one could understand that from code & after further check internet for int21 documentation, but again it would make reading much "smoother". I assume someone that uses assembly on daily usage probably seems very obvious...

    The book is filled with real "gems" as to HOW O/S works, what's get loaded first, who calls who, what registry key to watch out for if someone were to add to list of "Known" DLLs etc. And even though I'm not "security specialist" (I more an hobbyist), I really learned ALOT from this book.
    I'm a software engineer for over 8 years, and I must admit only now I understand certain compiler flags & concept like ASLR, /GS & DEP...

    The author takes a chapter to explain one thing at a time, and at the end of the chapter he provides some sort of "overall review", usually inside simple to understand chart/diagram that will help the user deal with the enormous amount of information provided.

    Author provides alot of KD snippets, that demonstrate & proves the stuff he teach, I only wish some small intro chapter were made to those who less know those commands. Again, just to be clear I'm not referring to a "KD for dummies", but it would sure help to add a small reference to the commands used, so that could provide user with quick reference, instead of having to google for it, to understand what it does.

    On the assembly side snippets, there are occasional some minor errors in the code snippets, like MOV/PUSH instead of LEA, but I guess that could be to avoid script kiddies to take code & compile right of the book.

    To sum things up, I really enjoyed reading this book (still reading it...)
    That's why I'm giving it 5 stars, it deserves it !
    10 people found this helpful
    Helpful
     Report
  • Juan Carlos
    5.0 out of 5 stars The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System
    Reviewed in the United States on September 14, 2012
    Format: PaperbackVerified Purchase
    The Book has several well informed documented and updated contents. The singular way that the Author, Bill Blunden, address the topic make the book so interesting to keep reading it. The Technicals words used in combination with the simplicity of his well experienced analogies when referring to a subject has done a straight forward picture of understanding for each Subject on the Book.
    5 people found this helpful
    Helpful
     Report
  • Guru
    5.0 out of 5 stars Know C and understanding of CS? Great addition to your tech collection.
    Reviewed in the United States on November 12, 2015
    Format: PaperbackVerified Purchase
    Solid information with great structure. Must have C back ground with solid CS understanding.
    4 people found this helpful
    Helpful
     Report
  • Mike Park
    5.0 out of 5 stars JohnnyCannuk
    Reviewed in the United States on April 20, 2014
    Format: KindleVerified Purchase
    Brilliant book. I wish more than snippets of code were available. Even if you don't end up making rootkit, you'll learn a lot from this book
    3 people found this helpful
    Helpful
     Report
  • T-me
    5.0 out of 5 stars best rootkit book out there
    Reviewed in the United States on December 10, 2013
    Format: PaperbackVerified Purchase
    Great book for all things rootkit related. This covers the majority of rootkit related code and techniques up till about 2010ish. I have not read it cover to cover but I did not see anything about items like patch guard in the book which is highly relevant to rootkits.

    This is still one of my highest suggested books even for the few things it does seem to lack.
    5 people found this helpful
    Helpful
     Report
  • Golumo
    5.0 out of 5 stars The BIBLE of rootkit development! PERIOD!
    Reviewed in the United States on August 23, 2015
    Format: Paperback
    This is book is brilliant! I really think this is the bible on rootkit development! Have learnt so much from it.
    One person found this helpful
    Helpful
     Report

Top reviews from other countries

Translate all reviews to English
  • Jean MICHEL
    5.0 out of 5 stars A acheter absolument
    Reviewed in France on September 24, 2025
    Format: PaperbackVerified Purchase
    Le must have pour comprendre comment windows fonctionne en profondeur , même si c'est un peu vieux c'est ultra rare d'avoir un livre aussi technique , je le recommande à tous les apprentis en sécurité offensive .
    Report
  • Victor
    5.0 out of 5 stars Ahora en stock, es un "must "have"
    Reviewed in Spain on January 11, 2018
    Format: PaperbackVerified Purchase
    Gran libro, detallado avanzado pero intuitivo. Llevaba esperando tiempo que estuviera en stock y por fin lo tengo. Lees, aprendes y comprendes mientras vas avanzando por el.
    Report
  • Amazon Customer
    4.0 out of 5 stars The Rootkit Arsenal 2e
    Reviewed in the United Kingdom on May 26, 2012
    Format: PaperbackVerified Purchase
    I am still reading this book actually I have just covered 3 chapters. It is a really nice book but I think the first edition was even better (which I came across only after I bought this one), which included source code as well at the end (Appendix), first ed is available online on Google and Safari books (with source code as well) If you want to experiment with DOS examples then I think you should try FreeDOS and Open Watcom Compiler (In-Line Assembler). I have not read those chapters on Windows XP, Vista etc. yet so can't comment.
    Report
  • Marco Vicari
    5.0 out of 5 stars excellent
    Reviewed in Italy on March 15, 2013
    Format: PaperbackVerified Purchase
    The second edition is a new book, it is different from other second edition that includes only few pages or few update.
    Revend Bill Blunder guides the reader across the new dark corners, it is a new trip passing through anti forensic and new evasion technics.
    Excellent book if the reader knows windows in deep and C language.
    Report
  • Karl-heinz Reng
    5.0 out of 5 stars Großartiges Buch
    Reviewed in Germany on December 20, 2012
    Format: PaperbackVerified Purchase
    Dieses Buch ist eines der wenigen, dass eine zweite Auflage verdient. Gut, einschränkend muß man sagen, dass natürlich auch in der Neuauflage viele Bereiche der ersten Auflage übernommen wurden, ca. 85 %. Der Mehrwert ist für einen "Erstauflagenbesitzer" eher gering. Auch wurde nicht explicit auf Unterschiede zwischen Auflage 1 und 2 entschieden.
    Das müßte man dann fairerweise einen Stern abziehen.
    Dieses Buch ist auch in erster Linie ein Anwenderbuch. Nicht seitenlanges theoreitsches Gefassel. Der Autor zeigt an vielen funktionierenden Beispielen, was Sache ist.
    Wie bekannt, das steht in der Beschreibung, war nur Windows abgearbeitet. Ob man das als negativ bewerten kann, ich denke nein. Natürlich gibts es einige Bücher, die alle bekannten Betriebssysteme abarbeiten. Bei diesen Büchern muß man aber oft leider Masse statt Klasse feststellen. Auch sind diese dann zwangsläufiger etwas "unwindows-lastiger" als Oberbegriff für die darin abgearbeiten Unixderivate.
    Wichtig ist, C sollte man können, Assember verstehen, Windows Kerneldebugger kein Fremdwort, und das Windows API samt SDK auch verstehen.

    Man "kann" es bedingt ein bißchen als Lernbuch verwenden, wenn man einsteigen möchte in die Materie Windows System Programmierung, aber dafür gibts dann doch geeignetere Werke. Es wird die Arbeit mit den Windows Debuggern aufgezeigt, aber eine Erläuterung findet man nicht. Auch hier empfiehlt sich andere Literatur, oder Quellen aus dem MSDN zurate zu ziehen.
    Fazit: Ein gelungenes Buch.
    Report
See more reviews