1. PEF1.zip (4GB)

    pfe1.zip is "Phil's Fun and Edutainment Subject Image". This is the first subject system discussed in the book. These files are for a developer workstation at PFE that the company believes was hacked.


  2. PAS.DD.zip (2GB)

    pas2.dd.zip is "Phil's Awesome Stuff Subject Filesystem Image". This filesystem image is for the second subject system discussed in the book. The image is from one of Phil's Awesome Stuff's workstations. An advanced attacker (as compared to the PFE hack) has attached services on this system and managed to embed himself very deeply into the workstation.


  3. PAA.RAM.LIME.zip (455MB)

    pas2.ram.lime.zip is "Memory Dump From PAS Subject System". This is the memory dump for the PAS subject (pas2).