Bibliography

1

Blacklight Homepage. F-Secure Blacklight
http://www.f-secure.com/blacklight/

2

FU Project Page. FU
http://www.rootkit.com/project.php?id=12

3

IceSword Homepage. IceSword
http://www.xfocus.net/tools/200505/1032.html

4

LordPE Homepage. LordPE Info
http://mitglied.lycos.de/yoda2k/LordPE/info.htm

5

Opc0de. 2005. How to get some hidden kernel variables without scanning
http://www.rootkit.com/newsread.php?newsid=101

6

Rohitabs API Monitor. API Monitor - Spy on API calls
http://www.rohitab.com/apimonitor/

7

Russinovich, Solomon. Microsoft Windows Internals Fourth Edition.

8

Silberman. RAIDE:Rootkit Analysis Identification Elimination
http://www.blackhat.com/html/bh-europe-06/bh-eu-06-speakers.html#Silberman