HOME * THE * Digital Forensics Biblio What's New This Month! Blogs and Wikis Topic-Specific Resources The Other 'Good Stuff' Digital Forensic Books Links to Links About This Site

WHAT'S NEW? This space is used to maintain a record of the latest additions to the site. Past Update Pages [2003 - 2006] January 2007 February 2007 March 2007 April 2007 May 2007 June 2007 July 2007 August 2007 September 2007 October 2007 November 2007   Proceedings from Techno Forensics 2007 Held October 29 - 31, 2007 in Gaithersburg, MD Barrett, Diane How Can Virtualization Affect Computer Forensics? [PDF Presentation] October 2007 Clark, Jonathan Advanced Cell (Mobile) Phone Forensics [PDF Presentation] October 2007 Dickerman, Daniel RAID Rebuilding [PDF Presentation] October 2007 Dominguez, Greg Equipping A [Computer] Forensic Lab [PDF Presentation] October 2007 Donnelly, Derrick Mac Forensics [PDF Presentation] October 2007 Donnelly, Nicole Macintosh Imaging Tools and Techniques [PDF Presentation] October 2007 Henry, Paul A. Anti - Forensics [PDF Presentation] October 2007 ICFP Board FAT - The Wily Internals of Windows’s File Systems [PDF Presentation] October 2007 Martinez, Javier Mobile Forensics [PDF Presentation] October 2007 Mills, Michael Apple Forensics Solutions Briefing [PDF Presentation] October 2007 Schroader, Amber E-mail Forensics [PDF Presentation] October 2007 Thompson, Eric Winds of Change and a Look at the Future of Digital Forensics [PDF Presentation] October 2007 Weisenbach, Joe All Optical Discs are NOT Created equal [PDF Presentation] October 2007 Wiebe, James Alternative Methods for Dealing with Whole Disk Encryption [PDF Presentation] October 2007 Baggili, Ibrahim M., Richard Mislan & Marcus Rogers [IJDE] Mobile Phone Forensics Tool Testing: A Database Driven Approach [PDF] Fall 2007 Batchev, Evtim Forensics Fusion [PDF Presentation] Fall 2007 Bem, Derek & Ewa Huebner [IJDE] Computer Forensic Analysis in a Virtual Environment [PDF] Fall 2007 Bunting, Stephen [IJDE] The Official EnCE: EnCase Certified Examiner Study Guide, 2nd Edition Chapter 1: Computer Hardware [PDF] October 2007 Cohen, Charles L. Growing Challenge of Computer Forensics March 2007 Cummings, Rich Saving Incident Response - Utilizing Computer Forensics & Trust Based Computing [PP Presentation] September 2007 de Leeuw, Michael B. & Eric A. Hirsch OMG! We Forgot to Produce IMs! [PDF] November 2007 Department of Justice Digital Forensic Analysis Methodology [PDF Flowchart] August 2007 Gardenghi, Matt Forensic Analysis of the Vista Recycle Bin [Word doc & script] October 2007 Gladyshev, Pavel & Andreas Enbacka [IJDE] Rigorous Development of Automated Inconsistency Checks for Digital Evidence Using the B Method [PDF] Fall 2007 Harms, Kris Forensic Analysis of System Restore Points in Microsoft Windows XP [PDF] 2007 MANDIANT Restore Point Analyzer Tool Huebner, Ewa Current Issues in Computer Forensics [PDF Presentation] October 2007 Data Hiding in the NTFS File System [PDF Presentation] October 2007 The Role of Operating System in Computer Forensics [PDF Presentation] September 2007 Kok, Lem Chin Forensic Technology in Computer Crime [PDF] October 2007 Marrington, Andrew, George Mohay, Andrew Clark, & Hasmukh Morarji Event-based Computer Profiling for the Forensic Reconstruction of Computer Activity [PDF] 2007 McLain, G. Robert Jr. United States V. Hill: A New Rule, But No Clarity for the Rules Governing Computer Searches and Seizures [PDF] Summer 2007 McQuown, Richard F. "Guillotine Method" for Acquiring RAM Dumps 2007 Other 'Memory Analysis' Resources RCFL Digital Evidence Field Guide [PDF] 2007 Windows Vista Forensic Quick Start [Word doc] 2007 Söderblom, Fredrik How to catch a DDoS kiddie [PDF Presentataion] October 2007 Stewart, Barrie Forensic Implications of Windows Vista [PDF] September 2007 The Grugq Meta Anti-Forensics: The HASH Hacking Harnes [PDF Presentataion] October 2007 Ull, Torbjörn X-Box: A possibility for possession of child abuse images [PDF] 2007 Weber, Dominik BitLocker - Full Volume Encryption in Vista Forensic Considerations [Zipped PP Presentation] May 2007 Forensic impact of NTFS Object Identifiers [Zipped PP Presentation] May 2007 NTFS Initialized Size [Zipped PP Presentation] May 2007 NTFS Record Attribute ID - A preliminary look into an often overlooked forensic clue [Zipped PP Presentation] May 2007 West Virginia University Forensic Science Initiative Technical Working Group for Education and Training in Digital Forensics [PDF] August 2007 Widup, Suzanne Preparing for the In-House Digital Investigative Function [PDF] 2007 © 2007-2008 All rights reserved