Home About This Site Kudos What's New Digital Forensics BIBLIO OS Specific Articles ALL Other Resources Links to Links

March 2004 FEATURED SITE University of Delaware Police Cyber Crime Investigations Resource Site Past Updates 2004 January 2004 February 2004   2003 February 2003 March 2003 April 2003 May 2003 June 2003 July 2003 August 2003 September 2003 October 2003 November 2003 December 2003   Within the Bibliography section Barbara, John J. Digital Evidence Accreditation Has Arrived October 2003 Bunting, Captain Stephen M. SERIES: DBB Kazaa Database File - 1st 9 Fields plus Kazaa Hash Decoded Viewing the Kazaa DBB File in EnCase Using EnCase to Decode DBB Record Field Values Viewing the Kazaa DBB File in EnCase - Meaning of the "Last Shared Date/Time" Burnett, Mark & James C. Foster Without a Trace: Forensic Secrets on a Windows Server [Presentation in PDF] January 2004 Carvey, Harlan Data Hiding on a Live System [PP Presentation] January 2004 Garrison, Dale Regional Computer Forensic Laboratories Nov/Dec 2003 Gregg, Michael C. The Certified Computer Examiner Certification January 2004 Howell, Frederick Starting a Computer Forensic Lab [Presentation in PDF] July 2003 Hurbanek, Thomas B. Computer Forensics and Digital Evidence [PP Presentation] January 2004 Kret, Dr. Curtis Nobody's Anonymous - Tracking Spam [Presentation in PDF] January 2004 Lillard, Terrence V. Stego Forensic Techniques [PP Presentation] 2003 McNamara, Joel Secrets of Computer Espionage: Tactics and Countermeasures - Chapter 1: Spies [PDF] June 2003 NEMLEC/Medford PD Computer Crime Unit Several presentations and publications O'Shea, Kevin Cyber Attack Investigative Tools and Techniques [PP Presentation] May 2003 Rude, Thomas DD and Computer Forensics - Deuce Restoring Images via the DD Command - April 2001 Using Linux for Today's Data Forensics [Presentation in PDF] November 2003 Ruiu, Dragos Hack and Counter-Hack - Active Forensics: Tracking that Intruder January 2001 Shannon, Matthew M. Review of Digital Intelligence Firefly and Ultrablock products Stephenson, Peter A Brief Intro to End-to-End Digital Investigation [Presentation in PDF] July 2003 Within Resources / Other Tools section Catalogue File Metadata Miner dd for Windows Allows the flexible copying of data under in a win32 environment. dd for Windows From the SANS site E-Mail Detective - Forensic Software Tool Software tool that allows investigators to extract all email contents (including graphics) from America Online’s database stores on a user’s disk drive. ftrace Fast Traceroute for Win32 GRAB Linux program for image acquisition [A windows version will be out soon] md5deep *NEW* Beta Version of md5deep 1.0 Protecting Your Children in Cyberspace NCIS provides a shareware search utility to scan a hard disk for images and display them; for you to judge appropriateness. Web Cache Illuminator Creates a meaningful list that not only displays all the file names in the cache, but, displays the title given by the web page`s creator. Within Resources / Vendors section CoreShield Write Blocking device VOOM ShadowDrive A computer hardware device that is designed to aid the investigation of a computer’s hard drive. It provides investigators with read write access from the host computer’s perspective, while maintaining the original hard drive unchanged. Within Resources / Projects section The Forensix Project The goal of the Forensix ("4N6") Project is to allow a system to be monitored so that, in the event of a security compromise, it is easy to track the compromise back to its source. Within Resources / Conferences section AGA New York Capital Chapter's 4th Annual Technology Conference Held January 28, 2004 Presentations given by NYS Police, Computer Forensics Unit of the Department of Tax & Finance, and Department of Health Within Legalese section Kerr, Orin S. Cybercrime's Scope: Interpreting 'Access' and 'Authorization' in Computer Misuse Statutes November 2003 Patzakis, John & Victor Limongelli Internal Computer Investigations as a Critical Control Activity Under Sarbanes-Oxley [PDF] October 2003 South Carolina Department of Archives and History Preserving evidence: recommended practices for creating and maintaining legally-admissible records on automated systems [PDF] February 1999 © 2003 All rights reserved