There are a number of text conventions used throughout this book.

CodeInText: Indicates code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles. Here is an example: "Once in Command Prompt, navigate to the folder containing the RawCap.exe file."

A block of code is set as follows:

meta:
 description = "Stuxnet Sample - file ~WTR4141.tmp"
 author = "Florian Roth"
 reference = "Internal Research"
 date = "2016-07-09"

Any command-line input or output is written as follows:

dfir@ubuntu:~$ tcpdump -h

Bold: Indicates a new term, an important word, or words that you see onscreen. For example, words in menus or dialog boxes appear in the text like this. Here is an example: "Click on File and then on Capture Memory."