Home Digital Forensics BIBLIO What's New ALL Other Resources Digital Forensic Books OS Specific Articles Links to Links About This Site

WHAT'S NEW? This space is used to maintain a record of the latest additions to the site. Past Update Pages [2003 - 2006] January 2007 February 2007 March 2007 April 2007 May 2007   Bair, Andy & Jay Smith Advanced File Carving with FTimes [PDF Presentation] May 2007 Basic File Carving with FTimes [PDF Presentation] May 2007 Black, Geoff Evidence of Folder Renaming using the MFT Standard Information Attribute and FileName Attribute [PDF] September 2005 Timeline Analysis [CEIC 2007] [PP Presentation] May 2007 Eide, Jarle & Olsen, Jan Ove Skogheim Forensic analysis of an unknown embedded device [PDF] June 2006 Furuseth, Andreas Grytting Digital Forensics: Methods and tools for retrieval and analysis of security credentials and hidden data [PDF] August 2005 Garfinkel, Simson Carving Contiguous and Fragmented Files with Fast Object Validation [PDF] May 2007 Grant, Jerry R. Computer Forensics - Issues In Pornography Cases [PDF] May 2007 Harrington, Michael Black Berry IPD Files [Demystified] & Black Berry Forensic Exams-How-To March 2007 Hex Dumping Primer Part I [PDF] April 2007 Hex Dumping Primer Part II [PDF] April 2007 Mobile Phone Seizure and Examination Guide [PDF] March 2007 RF Signal Isolation [PDF] March 2007 SIM Card File System [PDF] February 2007 SIM Card Protocols [PDF] March 2007 Kessler, Gary & Matt Fasulo The Case for Teaching Network Protocols to Computer Forensic Examiners [PDF] April 2007 Litchfield, David Oracle Forensics Part 1: Dissecting the Redo Logs [PDF] March 2007 Oracle Forensics Part 2: Locating dropped objects [PDF] March 2007 Oracle Forensics: Part 3: Isolating Evidence of Attacks Against the Authentication Mechanism [PDF] March 2007 Oracle Forensics Part 4: Live Response [PDF] April 2007 Mikkilineni, Aravind, Osman Arslan, Pei-Ju Chiang, Roy M. Kumontoy, Jan P. Allebach, George T.C. Chiu, & Edward J. Delp Printer Forensics using SVM Techniques [PDF] 2005 National Institute of Justice Digital Evidence in the Courtroom: A Guide for Law Enforcement and Prosecutors [PDF] January 2007 Newman, Aaron Oracle Forensics: Collecting Evidence after an Attack [PP Presentation] 2006 Office of the Maricopa County Attorney State of Arizona v. Matthew Bandy - Factual and Forensic Report [PDF] January 2007 Sobieraj, Sean & Richard Mislan Mobile Phones: Digital Photo Metadata [PDF Poster] 2007 Stahlberg, Patrick, Gerome Miklau, & Brian Neil Levine Threats to Privacy in the Forensic Analysis of Database Systems [PDF] 2007 Velasco, Jason A Guide to Electronic Evidence Collection Methodologies [PDF] 2007 Vidas, Tim [CanSecWest] Post-Mortem RAM Forensics [PDF Presentation] April 2007 Wadhwa, Kush [Checkmate] Volume Boot Sector Format of FAT May 2007 Wagholikar, Nikhil [Checkmate] Dare to delete my files! May 2007 Wright, Paul M. Oracle Database Forensics using LogMiner [PDF] January 2005 Oracle Forensics in a Nutshell [PDF] March 2007 Within Legalese Jekot, Wayne Computer Forensics, Search Strategies, and the Particularity Requirement [PDF] Spring 2007 Within Utilities DBXanalyzer [Free] Reads, analyses and manages email data files created by Microsoft Outlook Express 5 and 6. ThumbsDisplay [Demo available] Displays all thumbnail images with original file name and timestamp. VFC - Virtual Forensic Computing [Demo available] Rapidly boot a forensic image of a suspects computer; or boot a physical write blocked hard drive. X1 Search Search and instantly find information, preview it in its native format and take action on it immediately regardless of type or location. Within Audio/Video CBL Data Recovery Profile on Discovery Channel [YouTube] Computer Forensics by Disklabs [YouTube] EnCase Computer Forensics Demo [YouTube] Identity Theft Prevention - Tour of Secret Service Cybercrime Command Center [Google Video] Using Foremost for forensic recovery © 2007 All rights reserved