Books
- Memory-Resident Malware and Fileless Attack DetectionWindows Internals, Memory Forensics, EDR, and Network Detection EngineeringSteve Publications
A practical guide to finding threats that never need to touch disk. Explore Windows internals, memory forensics, EDR telemetry and network detection through safe labs and real investigative methods. Built for defenders who want to understand what happens in memory, spot suspicious behavior and turn evidence into reliable detections.
