// Comparison

Cybersécurité et Malwares vs The Art of Memory Forensics: Which Should You Read?

Two cybersecurity books on Malware, compared honestly: who each is for, what each does best, and which to read first.

Advanced

4/52025

Détection, analyse et Threat Intelligence

Sébastien Larinier, Paul Rascagnères

Now in its 5th edition, the French-language reference for malware analysis by Sébastien Larinier and Paul Rascagnères, a well-known APT threat researcher, running from identification to Threat Intelligence across Windows, macOS, Linux, Android, and iOS.

Advanced

5/52014

The Art of Memory Forensics

Detecting Malware and Threats in Windows, Linux, and Mac Memory

Michael Hale Ligh, Andrew Case, Jamie Levy, AAron Walters

Ligh, Case, Levy, and Walters' canonical reference on memory analysis with Volatility — the technique, the tooling, and the operating-system internals it depends on, across Windows, Linux, and macOS.

Read this if

French-speaking malware analysts and forensic investigators who want one comprehensive reference covering every major platform (Windows, macOS, Linux, mobile) in a single volume, through to collecting and sharing Threat Intelligence.

Incident responders, threat hunters, and malware analysts moving past disk forensics into the place where modern attackers actually live: in memory, in transit, and unbacked by files on disk. Also the textbook for the GCFA-and-beyond DFIR career path.

Skip this if

Beginners with no systems or security background at all; the 687 pages cover broad, technical ground that assumes existing familiarity with systems administration and security fundamentals.

Beginners with no OS-internals background; the book assumes you know what a process, a handle, and a kernel object are. Also dated on Volatility 3 — written for 2.x — though the conceptual material translates cleanly.

Key takeaways

One of the few French-language references covering malware analysis across every major platform in one book, mobile included.
Rascagnères is a recognized APT threat researcher, so the content reflects real professional practice, not just academic theory.
A fifth edition with regular re-releases keeps the material broadly current, rare for a French-language technical book.

Memory is the only place where modern post-exploitation tools are guaranteed to be honest; the book makes that argument by showing what you can recover that disk cannot.
Volatility plugins are an investigative grammar — once you know the verbs, you can construct the questions; the book is the dictionary for the grammar.
Cross-OS memory forensics is one workflow with three dialects; the unified Windows/Linux/macOS coverage is the book's underrated structural choice.

How they compare

We rate The Art of Memory Forensics higher (5/5 against 4/5 for Cybersécurité et Malwares). For most readers, that means The Art of Memory Forensics is the primary pick and Cybersécurité et Malwares is a useful follow-up.

Both books target advanced-level readers, so the choice is about topic, not difficulty.

Cybersécurité et Malwares and The Art of Memory Forensics both cover Malware, Forensics, so reading them in sequence reinforces the same material from different angles.

Keep reading

Cybersécurité et Malwares

→ Alternatives to Cybersécurité et Malwares → What to read after Cybersécurité et Malwares