Digital Forensics and Incident Response - Second Edition

Conventions used

There are a number of text conventions used throughout this book.

CodeInText: Indicates code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles. Here is an example: "Once in Command Prompt, navigate to the folder containing the RawCap.exe file."

A block of code is set as follows:

meta: description = "Stuxnet Sample - file ~WTR4141.tmp" author = "Florian Roth" reference = "Internal Research" date = "2016-07-09"

Any command-line input or output is written as follows:

dfir@ubuntu:~$ tcpdump -h

Bold: Indicates a new term, an important word, or words that you see onscreen. For example, words in menus or dialog boxes appear in the text like this. ...