O'Reilly logo

Windows Forensics and Incident Recovery by Harlan Carvey

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Real Incidents

In 1988, a hole in the debug mode for sendmail and a buffer overflow in the finger service allowed a worm to spread like wildfire across the Internet. Known as the “Robert Morris worm,” named after the author, it was released from MIT in order to disguise the fact that it was originally from Cornell. A bug in the program of the worm caused it to spread and reinfect systems at a much greater rate than anticipated, leading to many sites completely disconnecting themselves from the Internet. Robert T. Morris was later convicted of violating the Computer Fraud and Abuse Act and was sentenced to three years probation, a fine of $10,050, and 400 hours of community service.

In 1988, Clifford Stoll discovered an accounting error of 75 ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required