The Rootkit Arsenal: Escape and Evasion: Escape and Evasion in the Dark Corners of the System

This book demonstrates how to modify a system at runtime to subvert a forensic live response. Readers will learn how to conceal their presence on a server, disable its security policies, sidestep group policy, maintain remote access, and covertly monitor system activity--all with the system administrator being none the wiser.