HOME * THE * Digital Forensics Biblio What's New This Month! Blogs and Wikis Topic-Specific Resources The Other 'Good Stuff' Digital Forensic Books Links to Links About This Site

ARTICLES, PAPERS and PRESENTATIONS --- Authors Beginning with 'A' All Links Current as of April 2009 Abouzakhar, Nasser S. & Gordon A. Manson Evaluation of Intelligent Intrusion Detection Models [PDF] Summer 2004 Abraham, Tamas Event Sequence Mining to Develop Profiles for Computer Forensic Investigation Purposes [PDF] 2006 Abrams, Lawrence (aka Grinler) Windows Forensics: Have I been Hacked? February 2004 Abrams, Steven M. Basic Computer Forensic for the Private Investigator [PPT Presentation] Computer Forensics 101 [PPT Presentation] May 2004 AccessData AccessData Certified Examiner Study Guide [PDF] August 2008 Registry Quick Find Chart [PDF] August 2005 Regular Expression Searching [PDF] Action Group into the Law Enforcement Implications of Electronic Commerce AGEC Issues Paper: Evidence and the Internet [PDF] September 2000 (from archive.org) Adelstein, Frank Live forensics: diagnosing your system without killing it first [PDF] February 2006 MFP: The Mobile Forensic Platform [PDF] Spring 2003 Mobile Forensic Platform [PPT Presentation] January 2004 (from archive.org) Adelstein, Frank, Brian Carrier, Eoghan Casey, Simson L. Garfinkel, Chet Hosmer, Jesse Kornblum, Jim Lyle, Marcus Rogers, & Phil Turner Standardizing digital evidence storage [PDF] February 2006 Adelstein, Frank, Yun Gao, Prof. Golden G. Richard III Automatically Creating Realistic Targets for Digital Forensic Investigation [PDF] August 2005 Automatically Creating Realistic Targets for Digital Forensic Investigation [PDF Presentation] August 2005 Adelstein, Frank & Robert A. Joyce File Marshal: Automatic extraction of peer-to-peer data [PDF] August 2007 Adelstein, Frank & Golden G. Richard III A Tutorial on Live Digital Forensics at ACSAC 2006 [Set of PPT Presentations] December 2006 Live Forensics Tutorial Part 1: Traditional Forensics [PPT Presentation] August 2007 Live Forensics Tutorial Part 2: Live Forensics [PPT Presentation] August 2007 Live Forensics Tutorial Part 3: Putting it all Together [PPT Presentation] August 2007 Admin Intrusion Detection Systems and A View To Its Forensic Applications [Available as Postscript download] February 2000 Adonis a.K.a. NtWaK0 Forensic Textware and Tools Afifi, Andrew Computer & Network Forensics; Best Practices and Lessons Learned [PPT Presentation] (from archive.org) Aggarwal, Sudhir et alia The Design and Development of an Undercover Multipurpose Anti-Spoofing Kit (UnMask) [PDF] December 2007 Aggarwal, Sudhir, Zhenhai Duan, Leo Kermes, & Breno de Medeiros E-Crime Investigative Technologies [PDF] January 2008 Ahmad, Atif The Forensic Chain-of-Evidence Model: Improving the Process of Evidence Collection in Incident Handling Procedures [PDF] September 2002 Ahmad, Atif & Anthonie Ruighaver FIRESTORM: Exploring the Need for a Forensic Tool for Pattern Correlation in Windows NT Audit Logs [PDF] November 2002 Improved event logging for security and forensics: developing audit management infrastructure requirements [PDF] April 2003 Ahmad, Atif and Tobias Ruighaver Design of a Network-Access Audit Log for Security Monitoring and Forensic Investigation [PDF] November 2003 Towards Identifying Criteria for the Evidential Weight of System Event Logs [PDF] 2004 Akin, Thomas Cisco Router Forensics [PPT Presentation] July 2002 Cisco Router Forensics Checklist [Zipped file] July 2002 WebMail Forensics [PDF Presentation] July 2003 Akkaladevi, Somasheker, Himabindu Keesara & Xin Luo Efficient forensic tools for handheld devices: A comprehensive perspective. [PDF] March 2008 Al-Hajri, Haitham An overview of Mobile Embedded memory Types and Forensics Methodology [PDF] December 2008 Al-Hajri, Haitham & K. Sansurooah iPhone Forensics [PDF] December 2008 Al-Hajri, Haitham & Patricia A H Williams The effectiveness of investigative tools for Secure Digital (SD) Memory Card forensics [PDF] December 2007 Al-Zarouni, Marwan Introduction to Mobile Phone Flasher Devices and Considerations for their Use in Mobile Phone Forensics [PDF] December 2007 Mobile Handset Forensic Evidence - a challenge for Law Enforcement [PDF] December 2006 Tracing E-mail Headers [PDF] 2004 Al-Zarouni, Marwan & Haitham Al-Hajri A Proof-of-Concept Project for Utilizing U3 Technology in Incident Response [PDF] December 2007 Alameda (California) District Attorney Computer Searches 2003 (from archive.org) Alderson, Rachel Computer Forensics - the Student Experience [PPT Presentation] November 2006 Alink, Wouter Stand-off XML Databases in Digital Forensics [PDF Presentation] October 2006 Alink, A., R. Bhoedjang, A. P. de Vries, & P. A. Boncz XIRAF: Ultimate Forensic Querying 2006 XIRAF – XML-based indexing and querying for digital forensics [PDF] August 2006 Allen, Bill Collecting Digital Evidence from Intrusion Detection Systems [PPT Presentation] Spring 2002 Allen, Stephen Computer Monitoring: Software vs. Hardware Keyloggers July 2006 Allgeier, Thomas Digital Media Forensics May 2000 Allinson, Caroline Audit Trails in Evidence: Analysis of A Queensland Case Study [RTF document] December 2003 Allison, Jared Automated Log Processing [PDF] December 2002 Almotairi, Saleh et alia Extracting Inter-arrival Time Based Behaviour from Honeypot Traffic using Cliques [PDF] December 2007 Almulhem, Ahmad & Issa Traore Experience with Engineering a Network Forensics System [PDF] 2005 Altheide, Corey Forensic analysis of Windows hosts using UNIX-based tools [PDF] July 2004 Altheide, Corey, Claudio Merloni, Stefano Zanero A methodology for the repeatable forensic analysis of encrypted drives [PDF] March 2008 Alvarex, Sean, Peter Cho & Ren Jin Evaluation of Write Blocking In SAFE Block XP V1.1 [PDF] June 2008 Evaluation of Write Blocking Speeds [PDF] July 2008 Alvarez, Paul Using Extended File Information (EXIF) File Headers in Digital Evidence Analysis [PDF] Winter 2004 Amatangelo, Lee Unleashing the Power of JumpStart: A New Technique for Disaster Recovery, Cloning, or Snapshotting a Solaris System 2000 Amenya, Malack Recovering, Examining and Presenting Computer Forensic Evidence in Court [Word document] 2004 Related PPT Presentation American Bar Association Recommendation [Regarding the PI licensing for CF Professionals] [Word doc] August 2008 America Online Law Enforcement Training Manual [PDF] Ami-Narh, James Tetteh, & Patricia A H Williams Digital forensics and the legal system: A dilemma of our times [PDF] December 2008 Anderson, Michael Computer Evidence Comes Of Age Computer Evidence Processing Computer Evidence Processing Step 1 -- Seizure of the Computer Electronic Document Discovery: A Powerful New Litigation Tool Evidence Processing: Computer Autopsy Good Documentation Is Essential Hard Disk Drives - Bigger is Not Better Identifying Internet Activity: Computer Forensics Goes To Cyber Space The Third Step - Preserve the Electronic Crime Scene Anderson, Philip, Maximillian Dornseif, Felix C. Freiling, Thorsten Holz, Alastair Irons, Christopher Laing, & Martin Mink A Comparative Study of Teaching Forensics at a University Degree Level [PDF] October 2006 Related PDF Presentation Andrew P Forensics (Procedures) Andrews, Chris Anti-Forensics Implications in the Security Environment [PDF Presentation] October 2008 Angelopoulou, Olga ID Theft: A Computer Forensics’ Investigation Framework [PDF] December 2007 Angelopoulou, Olga, Paula Thomas, Konstantinos Xynos & Theodore Tryfonas Online ID theft techniques, investigation and response [PDF] 2007 Anson, Steven & Steve Bunting Understanding and Exploiting Windows Networks [PDF] April 2007 Chapter 1 from Mastering Windows Network Forensics and Investigation Appel, Ed Computer & Insider Crime: Problems & Solutions [PPT Presentation] February 2004 Appel, Edward J. & Mark M. Pollitt Report on the Digital Evidence Needs Survey Of State, Local and Tribal Law Enforcement [PDF] March 2005 Appleby, Timothy Best Practices for Handling of Electronic Evidence [PDF Presentation] September 2003 (from archive.org) Arasteh, Ali Reza & Mourad Debbabi Forensic memory analysis: From stack and code to execution history [PDF] August 2007 Arasteh, Ali Reza & Mourad Debbabi, Assaad Sakha, Mohamed Saleh Analyzing multiple logs for forensic evidence [PDF] August 2007 Arkin, Ofir Trace-Back: A Concept for Tracing and Profiling Malicious Computer Attackers [PDF] 2002 (from archive.org) Armstrong, Chris & Lauren Wagner Creating a Wireless Network Investigation Toolkit: Basic Hardware and Software Specifications [PDF] July 2008 Armstrong, Colin Developing a Framework for Evaluating Computer Forensic Tools [PDF] March 2003 Armstrong, Colin & Nimal Jayaratna Teaching Computer Forensics: Uniting Practice with Intellect [PDF] June 2004 (from archive.org) Armstrong, Helen & Phillip Russo Electronic Forensics Education Needs of Law Enforcement [PDF] June 2004 (from archive.org) Armstrong, Illena Computer Forensics - Detecting the Imprint [PDF] August 2002 Arnes, Andre, Paul Haas, Giovanni Vigna and Richard A. Kemmerer Digital Forensic Reconstruction and the Virtual Security Testbed ViSe 2006 Arthur, K.K. & H.S. Venter An Investigation into Computer Forensic Tools [PDF] July 2004 Asinari, María Verónica Pérez Legal Constraints for the Protection of Privacy and Personal Data in E-evidence Handling [PPT Presentation] May 2003 (from archive.org) Asinari, María Verónica Pérez & Olivier Leroux Overview of Legal Aspects, E-Evidence and Data Protection [PPT Presentation] May 2003 (from archive.org) Associated Corporate Consultants The Investigation of Computer Crime and Crime Scene Computers Lesson Sample [PDF] (from archive.org) Association of Chief Police Officers (ACPO) Good Practice Guide For Computer Based Evidence [PDF] v.2 - June 1999 Good Practice Guide For Computer based Electronic Evidence [PDF] v.3 - September 2003 (from archive.org) Association of Chief Police Officers (ACPO) & 7Safe Good Practice Guide for Computer-Based Electronic Evidence [PDF] 2007 Astrowsky, Brad & Susan Kreston Some Golden Rules for Investigating On-Line Child Sexual Exploitation 2001 Aucsmith, David The Digital Crime Scene: A Software Prospective [PDF] March 2004 (from archive.org) Austin, Richard Designing and Implementing a Computer Forensics Curriculum and Exercises [PDF Presentation] September 2005 (from archive.org) Case Forms [PDF] Look Ma, No Disks! When CSI Comes to Your Data Center [PDF] Spring 2007 To Catch a Thief: Digital Forensics in Storage Networks [PDF Presentation] Spring 2006 Australasian Centre for Policing Research Seizing Computers and other Electronic Evidence Best Practice Guide [PDF] February 2003 Australia's [Western] Department of the Premier and Cabinet – Office of e-Government Forensic Plan - A technical guide to aid in the preservation of digital evidence following a computer security incident [PDF] July 2004 Incident Response Plan - A technical guide to aid in preparing for, detecting and responding to computer security incidents [PDF] July 2004 Australian High Tech Crime Centre High Tech Crime Briefs 2005 - 2008 New series, issues 1-17 Author Unknown Skype Log File Analysis [PDF] Awasom, Roland Anye Providing IT Forensic Evidence for Law Enforcement [PDF] 2006 Axford, Kai How'd They Find THAT?: Implementing the Microsoft Fundamental Computer Investigation Guide for Windows [PPT Presentation] August 2007 Identifying Computer Attacks - Tips, Tricks and Tools [PPT Presentation] 2007 Ayers, Rick Mobile Device Forensics - Tool Testing [PDF Presentation] May 2008 Ayers, Rick, & Wayne Jansen PDA Forensic Tools: An Overview and Analysis [PDF] August 2004 Ayers, Rick, Wayne Jansen, Nicolas Cilleros & Ronan Daniellou Cell Phone Forensic Tools: An Overview and Analysis [PDF] October 2005 Azrina, R. & R.Othman Expert Witness: Completion of a perfect circle [PDF] February 2008 Back to Top © 2007-2009 All rights reserved