Research on APT-Trojan Forensics based on Virtual Machine and API Monitor
Zhu Pin · Xinxi wangluo anquan · 2014
APT attack is the most serious threat to national organization and corporation. Generally,it is controlled by a meticulouslydesigned organization and can hardly be detected. It has advanced,persistent andhigh strategy characteristics.This paper presents a module for APT-TrojanForensic,which is based on Virtual machineand API monitor.