Home Digital Forensics BIBLIO What's New ALL Other Resources Digital Forensic Books OS Specific Articles Links to Links Reciprocal Links About This Site

WHAT'S NEW? This space is used to maintain a record of the latest additions to the site. Past Update Pages [2003 - 2004] January 2005 Februray 2005 March 2005 April 2005     Within the Bibliography section ACPO & NHTCU ACPO Strategy for the Investigation of Computer-Enabled Criminality and Digital Evidence [PDF] January 2005 Bigler, Mark Computer Forensics Gear August 2001 Black, Paul E. Software Write Block - Testing Support Tools Validation [PDF Papers] March 2005 Black, Paul E. & James R. Lyle Testing BIOS Interrupt 0x13 Based Software Write Blockers [Paper, PP Presentation & Poster] March 2005 Britton, James How to use Helix (Incident Response and Computer Forensics Live CD) to conduct a Basic Incident Response on a Windows XP Professional SP2 Computer March 2005 Carvey, Harlan Malware analysis for windows administrators [Available by request] 2005 Registry key list [Zipped excel spreadsheet] April 2005 Cohen, Dr. Michael RAID Reconstruction - And the search for the Aardvark [PDF Presentation] April 2005 Collet, David Forensic and Log Analysis GUI [PDF Presentation] April 2005 Fei, B.K.L., J.H.P. Eloff, H.S. Venter and M.S. Olivier Exploring Data Generated by Computer Forensic Tools with Self-Organising Maps [PDF] February 2005 Feldman, Joan Cybersleuthing: A Guide to the Essentials of Computer Discovery [PDF Presentation] April 2005 Forster, Peter Time and Date Issues in Forensic Computing - A Case Study [Available by request] 2004 Gibson, Chris SIRT & Forensics [PDF Presentation] March 2005 Graf, Francis Step Away from the Keyboard! [PDF Presentation] Februsry 2004 Grunwald, Lucas Digital Forensic [PDF] January 2005 Digital Forensic Analysis [PDF Presentation] January 2005 Jones, Keith J. & Rohyt Belani Web Browser Forensics, Part 1 March 2005 Limongelli, Victor Internal Computer Investigations as a Critical Control Activity [PDF Presentation] April 2005 Leuenberger, Adrian Win32 – Evidence Gathering [PDF Presentation] April 2004 Nikkel, Bruce J. Domain Name Forensics: A Systematic Approach to Investigating an Internet Presence [PDF] November 2004 Forensic acquisition and analysis of magnetic tapes [PDF] February 2005 Pan, Yin & Bill Stackpole Computer Forensics Course Development [PP Presentation] April 2005 Phillips, Amelia Properly Obtaining and Securing Evidence in a Computer Crime Investigation (bottom of page) [PP or PDF Presentations] February 2005 Project Leadership Associates Electronic Data Discovery and Data Forensics [PDF Presentations] 2004 Raio, Stephen & Christina King FIRE: Forensic & Incident Response Environment [PP Presentation] November 2003 Schmidtknecht, Douglas Cyber Crime: Labs and Investigations [PDF Presentation] 2003 (from archive.org) Stanczewski, Yann Computer Forensics: How to be a Cybercrime Detective [PDF Presentation] 2003 Taylor, David Incident Response and Computer Forensics [PDF Presentation] March 2004 Thompson, Eric Developing Computer Forensics Solutions for Terabyte Investigations [PDF Presentation] January 2005 US/CID Computer Crime Manual (excerpt) [PDF] January 2005 Watson, David Lilburn Hidden Data [PDF Presentation] April 2005 Weeks, Calvin & Sean Ensz Cyber Forensics: Find Out What You Are Missing [PP Presentation] February 2005 White, Douglas & Michael Ogata Identification of Known Files on Computer Systems [PDF Presentation] February 2005 Within Legalese section ABA Digital Evidence Project Survey On Electronic Discovery Trends and Proposed Amendments To The Federal Rules of Civil Procedure [PDF] February 2005 Curphey, Shauna United States v. Lifshitz, Warrantless Computer Monitoring and the Fourth Amendment [PDF] April 2005 Electronic Discovery Law E-Discovery Case Database Stetson E-Discovery CLE Materials [PDF] March 2005 Sachdev, Ameet Costly electronic discovery `part of potentially every case in the 21st Century' [PDF] April 2005 Within Resources / Projects section The Electronic Discovery Reference Model Project A new initiative for the development of an electronic discovery reference model. FARMER'S BOOT CD Set to go live April 28, 2005 FCCU GNU/Linux Forensic Bootable CD A bootable CD based on KNOPPIX that contains a lot of tools suitable for computer forensic investigatins, including bash scripts. Its main purpose is to create images of devices prior to analysis, and it is used by the Belgian Federal Computer Crime Unit. Network Security Toolkit (NST) This bootable ISO live CD is based on Fedora Core 2 Within Resources / Other Tools section DiskPatch MBR, partition and boot sector repair, disk cloning, scan for errors and disk wipe. Has a Forensic Mode Filesig.co.uk Software Filesig Manager & Hash File are free to download from this site. Demo versions of Simple Caver & Disk Map are available on request. Red Cliff Web Historian Web Historian assists users in reviewing Web sites (URLs) that are stored in the history files of the most commonly used browsers including: Microsoft's Internet Explorer, Mozilla, Firefox, Netscape, Opera and Safari. Red Cliff Web Historian is designed primarily as a tool for computer forensic examiners. Stream Explorer A utility that reveals alternate file streams with Windows NT 4.0, 2000, XP, or 2003. Windows Forensics and Incident Recovery tools A listing of the tools described and used in Harlan Carvey's book Within Audio & Video CyberCops (Audio) KPLU news interview Phillips, Amelia Properly Obtaining and Securing Evidence in a Computer Crime Investigation (bottom of page) [Streaming video] February 2005 Within Newsletters Arkfield's Electronic Discovery and Evidence Newsletters © 2005 All rights reserved