Home About This Site Kudos What's New Digital Forensics BIBLIO OS Specific Articles Other Resources Links to Links

April 2003 Within the Bibliography section AntiChip EnCase Test and Tutorial Tests Encase before and after overwriting of data using Eraser program Ball, Craig Computer Forensics for Lawyers Who Can't Set the Clock on Their VCR [PDF] October 2002 Barnett, Ryan Honeypots: Monitoring and Forensics Bonin, Henry Vulnerability Analysis, Audits/Reporting, and Computer Forensics [PP Presentation] November 2002 Bouwers, Koen Forensic Techniques for Investigating Network Traffic [PP Presentation] July 2002 Brozycki, John Norton Ghost 2003 as a Forensic Image Acquisition Tool (GCFA Practical) [PDF] December 2002 Carrier, Brian Defining Digital Forensic Examination & Analysis [PP Presentation] Casey, Eoghan Error, Uncertainty, and Loss in Digital Evidence [PP Presentation] February 2003 Casey Certainty Scale (document accompanies lecture) [Word document] February 2003 Castillo, Paul The Necessity for Computer Forensics (pages 8-15) [PDF] February 2002 Chappell, Laura Advanced Packet Analysis [PDF] Case Studies in Implementing Packet-Level Analysis-based Security Solutions [PDF] Cybercrime at Packet-Level Part 1 [PDF] Cybercrime at Packet-Level Part 2 [PDF] Clausing, James A. Perform a Forensic Tool Validation (lastcomm from TCT) – Process Accounting Records (GCFA Practical) [Word document] April 2002 Ervin, Tom CyberCrime September 2001 Fedeli, Alan Computer Security Incident Response Planning [PDF] May 2001 Fung, James Dead Linux Machines Do Tell Tales (GCFA Practical) [PDF] May 2001 Garfinkel, Simson L. A Web Service for File Fingerprints: The Goods, the Bads, and the Unknowns [PDF] 2003 Howell, Wesley Computer Forensics - Scenarios & Shutdown Procedures [PDF] March 2003 Computer Forensics Investigations [PDF] Johansson, Christian Forensic and Anti-Forensic Computing [PDF] December 2002 Kessler, Gary File Signatures Table Khoo, Martin P0st-M0rt3m 0f 4 R00tk1t 4tt4ck [PP Presentation] April 2001 Kirby, Marietta E. Your First Primary Incident Handler Case (GCFA Practical) [Word document] Kizza, Joseph M. Network Forensics [PP Presentation] Leibrock, Larry Forensic Tools and Processes for Windows XP [PDF] 2003 Lim, Kim bo Behavioral Data Forensics in Intrusion Detection [PP Presentation] January 2003 Manzano Computer and Network Forensics (CNF) Project Homepage May, Russell Computer Forensics and Demonstration of Forensic Techniques [PP Presentation] Neville, Alan IDS Logs in Forensics Investigations: An Analysis of a Compromised Honeypot March 2003 Pedersen, Stephen Forensics Analysis of an Unknown System (GCFA Practical) September 20, 2002 Reining, Christopher J. Analysis of a Compromised Honeypot Roe, Michael Cryptography and Evidence [PDF] 1997 Rowland, Craig Fast [Computer] Forensics for Busy Administrators [Presentation in PDF] November 2002 Schwarz, Joel Forensics and Incident Response: The Law Enforcement Perspective [Presentation in PDF] November 2002 Shirani, Bram An Introduction to Linux Forensics [PP Presentation] Anti-forensics [PP Presentation] Sira, Rommel Network Forensics Analysis Tools: An Overview of an Emerging Technology [PDF] January 2003 Sommer, Peter Evidence in Internet Paedophilia Cases [PDF] 2002 Sorenson, Holt Incident Response Tools For Unix, Part One: System Tools March 2003 Spenneberg, R. Intrusion Detection for Linux Server Sample Chapter 16: Analyzing a compromised computer in German Also available: Download forensic-rescue-cd-2.0.iso Stephenson, Peter A Brief Intro to Forensic Network Analysis [Presentation in PDF] November 2002 Strubinger, Ray Exercises in the Art and Science of Computer Forensics (GCFA Practical) [PDF] SWGDE SWGDE v. 3, Best Practices - For Review Only [PDF] January 2003 Wagner, David GIAC Certified Forensic Analyst Practical Assignment [Word document] Weeraman, Anuradha Data Recovery and Forensics (using TASK - The @Stake Sleuth Kit) September 2002 Within Resources / Other Tools section File Signature Database This database is designed to assist examiners primarily for the process of searching unallocated space. Revised April 3, 2003 Within Legalese section Cray, Daniel K. Spoliation and E-Discovery: Educating the Practitioner [PDF] June 2002 Reilly, Lynn Meta Data Matters [PDF] November 2002 Within Audio/Video section OCATE Lectures on Digital Forensics Currently 4 lectures in streaming video, by Jesse Kornblum, Mark Pollitt, Dr. John McHugh, & Eoghan Casey © 2003 All rights reserved