<?xml version="1.0" encoding="UTF-8"?>
<mods xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://www.loc.gov/mods/v3" version="3.1" xsi:schemaLocation="http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-1.xsd">
  <titleInfo>
    <title>Malware forensics field guide for Windows systems</title>
    <subTitle>digital forensics field guides</subTitle>
  </titleInfo>
  <name type="personal">
    <namePart>Malin, Cameron H.</namePart>
    <role>
      <roleTerm authority="marcrelator" type="text">creator</roleTerm>
    </role>
  </name>
  <name type="personal">
    <namePart>Casey, Eoghan.</namePart>
  </name>
  <name type="personal">
    <namePart>Aquilina, James M.</namePart>
  </name>
  <typeOfResource>text</typeOfResource>
  <genre authority="marc">bibliography</genre>
  <originInfo>
    <place>
      <placeTerm type="code" authority="marccountry">mau</placeTerm>
    </place>
    <place>
      <placeTerm type="text">Waltham, MA</placeTerm>
    </place>
    <publisher>Syngress</publisher>
    <dateIssued>c2012. 4803161</dateIssued>
    <dateIssued encoding="marc">2012</dateIssued>
    <issuance>monographic</issuance>
  </originInfo>
  <language>
    <languageTerm authority="iso639-2b" type="code">eng</languageTerm>
  </language>
  <physicalDescription>
    <form authority="marcform">print</form>
    <extent>xxxviii, 518 p. : ill. ; 23 cm.</extent>
  </physicalDescription>
  <tableOfContents>Malware incident response -- Memory forensics -- Post-mortem forensics -- Legal considerations -- File identification and profiling -- Analysis of a malware specimen.</tableOfContents>
  <note type="statement of responsibility">Cameron H. Malin, Eoghan Casey, James M. Aquilina; Curtis W. Rose, technical editor.</note>
  <note>Includes bibliographical references and index.</note>
  <subject authority="lcsh">
    <titleInfo>
      <title>Microsoft Windows (Computer file)</title>
    </titleInfo>
  </subject>
  <subject authority="lcsh">
    <topic>Malware (Computer software)</topic>
  </subject>
  <subject authority="lcsh">
    <topic>Computer viruses</topic>
  </subject>
  <subject authority="lcsh">
    <topic>Computer security</topic>
  </subject>
  <subject authority="lcsh">
    <topic>Computer crimes</topic>
    <topic>Investigation</topic>
  </subject>
  <classification authority="lcc">QA76.76.C68 M322 2012</classification>
  <classification authority="ddc" edition="23">005.84 MCM</classification>
  <identifier type="isbn">9781597494724 (pbk. : alk. paper)</identifier>
  <identifier type="lccn">2012019134</identifier>
  <recordInfo>
    <recordContentSource authority="marcorg">DLC</recordContentSource>
    <recordCreationDate encoding="marc">120522</recordCreationDate>
    <recordChangeDate encoding="iso8601">20150408114201.0</recordChangeDate>
    <recordIdentifier source="OSt">17313422</recordIdentifier>
  </recordInfo>
</mods>
