Home About This Site Kudos What's New Digital Forensics BIBLIO OS Specific Articles Other Resources Links to Links

November 2003 Past Updates February 2003 March 2003 April 2003 May 2003 June 2003 July 2003 August 2003 September 2003 October 2003 Within the Bibliography section Berghel, Hal The Discipline of Internet Forensics August 2003 Conorich, Douglas Computer Forensics [Presentation in PDF] August 2003 CTOSE CTOSE Project Results [PDF] October 2003 Horvat, Mario Disk Cloning [PDF] Revised September 2003 Juchniewicz, Joseph A. Introduction to Forensics 101 [Presentation in PDF] August 2003 King, Samuel T. & Peter M. Chen Backtracking Intrusions [PDF] October 2003 Kornblum, Jesse Open Source in Computer Forensics [Presentation in PDF] Simple but Sound Tools for First Responders [Presentation in PDF] January 2003 Lathoud, Bertrand Strengthening the collaboration between the Investigator and the Information System Manager Through Methodical Computer Traces Management [Presentation in PDF] September 2003 (Local copy) Lofshult, Joseph Open Source and Incident Response [Presentation in PDF] August 2003 Moore, Ossie J. H. Use A Linux Bootable CDROM to Image Your Hard Drive August 2003 Nelson, Sharon D. & John W. Simek Electronic Evidence the Ten Commandments 2003 Finding and Securing Electronic Evidence 2002 NIST Several presentations covering the NSRL thru September 2003 Pan, Norman Forensic Analysis of Hacking Cases [Presentation in PDF] September 2003 Pettinari, Dave Got a Virus? Don’t Call a Doctor, Call a Cop Winter 2002 Siebert, Bill Authentication of Computer Evidence [PP Presentation] September 2003 van Essen, Maarten How to use Forensic Toolkit v2.0 on Windows NT 4.0 Server [Word document] Yasinsac, Alec, Robert F. Erbacher, Donald G. Marks, Mark M. Pollitt, & Peter M. Sommer Computer Forensics Education [PDF] July/August 2003 Within Resources / Other Tools section AIR - Automated Image and Restore (Free) A GUI front-end to dd/dcfldd designed for easily creating forensic bit images PDAZap (Free) PDAZap is a small application that when placed on a P800 will allow you to image the device's flash to a Sony Memory Stick Duo. This can be used by forensic investigators and/or security researchers alike. Process Viewer for Windows (Free) PrcView is a process viewer utility that displays detailed information about processes running under Windows. UTF-8 output patch for task-1.60/sleuthkit-1.6x (Free) The patch allows one to view foreign characters in the file names and such of an NTFS image. The Sleuth Kit code converts the Unicode NTFS file system structures into ASCII. The patch changes that behavior, but it doesn't change the keyword searching ability. That is still done with 'strings' and 'grep', which do not easily support Unicode. Within Legalese section Abrams, Steven M. & Philip C. Weis Knowledge of Computer Forensics is Becoming Essential for Attorneys in the Information Age [PDF] February 2003 Barron-Evans, Amy & Martin F. Murphy The Fourth Amendment in the Digital Age: Some Basics on Computer Searches June 2003 Kays, Alan Electronic Discovery - New Business Practices - New Discovery Methods [PDF] Spring 2003 Lumantao, Gilbert E. The Rules of Electronic Evidence Zweig, Michael P. & Mark J. Goldberg Electronic Discovery: A Brave New World [PDF] July 2003 Within CC Units Pennsylvania State Police Area Computer Crimes Task Force https://www.linuxnotes.net/TaskForce/index.php Within Organizations Center for Infrastructure Assurance and Security (CIAS) http://cias.utsa.edu/ Within the Listservs, Newsletters, Journals, etc. section Datasleuths Monthly Newsletters http://www.datasleuths.com/newsletter.asp Police Futurist The Newsletter of the Society of Police Futurists International (PFI) http://www.policefuturists.org/newsletter/index.htm © 2003 All rights reserved