Home Digital Forensics BIBLIO What's New ALL Other Resources Digital Forensic Books OS Specific Articles Links to Links Reciprocal Links About This Site

WHAT'S NEW? This space is used to maintain a record of the latest additions to the site. Past Update Pages [2003 - 2005] January 2006 February 2006 March 2006 April 2006     The Virtual Training Environment (VTE) https://www.vte.cert.org/ New Content Added April 25, 2006 Adinolfi, Daniel Detection and Investigation of Compromised Hosts on Campus Networks [PDF Presentation] April 2006 Bazeley, Joseph & David Bowie Kick-Starting Forensics at Your School [PP Presentation] April 2006 Berger, David Netmon forensic tools and tips April 2006 Boldt, Martin & Bengt Carlsson Analysing Privacy-Invasive Software Using Computer Forensic Methods [PDF] 2006 Chen, Kevin, Andrew Clark, Olivier De Vel & George Mohay ECF - Event Correlation for Forensics [PDF] 2003 Curtin, C. Matthew Electronic Evidence in Criminal Defense [PDF Presentation] March 2006 Donnelly, Derrick Macintosh Forensics [PDF Presentation] September 2005 Hendron, David W. The Continuing Evolution of Computer Forensics (pages 18-25) [PDF] Law Enforcement Quarterly Winter 2005-2006 Howie, John Forensic Challenges - Windows Encrypted Content [PDF Presentation] April 2006 Innes, Simon Secure Deletion and the Effectiveness of Evidence Elimination Software [PDF] Septemner 2005 Jacoby, Conrad J. Working With Obsolete Data March 2006 Krishnan, N. Cyber Crimes & Cyber Forensics [PP Presentation] September 2005 Llamas, David Network Forensics and Covert Channels Analysis in Internet Protocols [PDF Presentation] April 2006 McCombie, S. & M. Warren Computer Forensics: An Issue of Definitions [PDF] 2003 Mercuri, Rebecca T. Challenges in Forensic Computing December 2005 Mikus, Nicholas An Analysis of Disk Carving Techniques [PDF] March 2005 Morfitt, Kim & Craig Valli After Conversation - An Forensic ICQ Logfile Extraction Tool [PDF] September 2005 Nance, Dr. Kara L. Computer Forensics – Hiding in Plain Sight [PDF Presentation] November 2005 Olivier, Martin S. Forensics and Privacy-enhancing Technologies - Logging and Collecting Evidence in Flocks [Abstract] 2005 Patzakis, John, Scott Mann & Melisa LaBancz Computer Forensics in the Global Enterprise [PDF] 2003 Pemble, Matthew W.A. The Essential Conflict Between "Computer" and "Forensics" [PP Presentation] April 2006 Rude, Thomas The Farmer's Boot CD [PDF] April 2006 Savoy, Jeffrey Forensic Overview [PP Presentation] April 2006 Stanley, Aaron & Evan McGoff Choosing Hardware for a Computer Forensics Lab [PDF] March 2006 Turnbull, Benjamin Googling Forensics [PDF] September 2005 Turner, Michael J. L. Beware: Computer Evidence Quicksand February 2001 Computer Evidence May 2001 Computer Misuse Act of 1990 cases (with links to related articles) Registered Forensic Practitioner: A New Breed of Expert March 2006 Valli, Dr. Craig & Paul Patak An investigation into the efficiency of forensic erasure tools for hard disk mechanisms [PDF] September 2005 Waghorn, Tom Testing the Date Maintenance of the File Allocation Table File System [PDF] 2003 Wee, Cheong Kai Analysis of hidden data in NTFS file system [PDF] March 2006 Weilbacher, Nathan Evidentiary Value of Link Files March 2006 Wong, Lih Wern Forensic Analysis of the Windows Registry [PDF] April 2006 Woodward, Dr. Andrew The effectiveness of commercial erasure programs on BitTorrent activity [PDF] September 2006 Within Legalese Harrold, Marc M. Computer Searches of Probationers - Diminished Privacies, "Special Needs" & "'Whilst' Quiet Pedophiles" - Plugging the Fourth Amendment into the "Virtual Home Visit" [PDF] December 2005 Pike & Fischer Digital Discovery & e-Evidence [PDF] March 2006 Within Forensic Utilities EMF Printer Spool File Viewer [Free] The software can be used to view an EMF spool file. Evidence Mover [Free] Evidence Mover automates transferring evidentiary data from one location to another—verified 100-percent intact. Forensic Internet Explorer – Beta [Free] The software currently parses the “index.dat” file identifying host sites that have been visited. TrID - File Identifier [Free] TrID Forum TrID is an utility designed to identify file types from their binary signatures. Vinetto [Free] Vinetto is a forensics tool to examine Thumbs.db files. Windows IR/CF Tools [Free] This project is the home of the Forensic Server Project, including it's components and other, additional tools that may be created and used for Incident Response and Computer Forensic activities on Windows systems. WindOra [Free] Tool to convert installation times used in Windows registries Within Audio & Video Donnelly, Derrick Macintosh Forensics [mp4 podcast] September 2005 © 2006 All rights reserved