[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_28":-5,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58},"routes/_store+/_readers+/email_author.$slug/route",{"_9":10,"_11":-5},"book",{"_12":13,"_14":15,"_16":17,"_18":19,"_20":21,"_22":23},"currentUser","id","Z2lkOi8vbGVhbnB1Yi9TdG9yZTo6Qm9va1Byb2R1Y3QvODMzNjU","title","Memory-Resident Malware and Fileless Attack Detection","state","published","contactAuthorMethod","email","aboutText","

This book teaches security engineers, SOC analysts, incident responders, threat hunters, detection engineers, malware analysts, DFIR practitioners, reverse engineers, Windows systems engineers, and advanced cybersecurity researchers how to understand, detect, investigate, contain, and validate defenses against memory-resident and fileless threats on Windows. It covers Windows internals relevant to detection, PE/COFF structures, managed execution surfaces, telemetry infrastructure, threat taxonomy, memory forensics, EDR architecture, network detection engineering, reproducible lab construction, detection methodology, reference implementations, forensic case studies, and production operations. All offensive demonstrations use benign simulators, synthetic artifacts, inert fixtures, or deliberately non-deployable constructs; no operational malware, credential stealers, persistence implants, EDR bypasses, stealth loaders, shellcode launchers, or weaponized injection frameworks are provided.

","authors",[24],{"_12":25,"_26":27,"_28":29},"Z2lkOi8vbGVhbnB1Yi9TdG9yZTo6UHJvZHVjdEF1dGhvci84OTAyMQ","name","Steve Publications","user",{"_30":31},"avatar",{"_32":33,"_34":35,"_36":37},"url","https://d39qdlcrvnra4b.cloudfront.net/avatars/3084982/medium/avatar.jpg?1784309602","styleName","medium","exists",true,"shoppingCartId","shoppingCart",{"_12":71,"_72":73,"_74":37,"_75":76,"_77":78,"_79":80,"_81":37},"locale","en","readerTheme","light","constants",{"_69":70},"publishers",{"_65":66,"_67":68},"learnerOrganizations",[],"needsLocaleCookieSync",false,"announcements",{"_59":60,"_61":-5},"sentryEnvironment","production","sentryRelease","2e8850ade54673cb878add1f11bf6ee2a336ea46","announcement_store",{"_62":52,"_63":64},"announcement_authors","flag","text","

Kick off your book project, get started with GhostAI, get better at marketing, or spend the day doing all three! Free live workshops on Zoom. Saturday, June 27, 2026.

\n","companies",[],"universities",[],"paypalClientId","AX53Cwz8jR6rVVzzZiZNWWXl0dGagi-GZrjG-S3Ua14E5nrKMn7DxDQ730O4R8LusLPp49ALn6aRVaEy","no-cart","count",0,"free","updatedAt","","paymentGateway","STRIPE","cartItems",[],"loading"]

Email the Author