HOME * THE * Digital Forensics Biblio What's New This Month! Blogs and Wikis Topic-Specific Resources The Other 'Good Stuff' Digital Forensic Books Links to Links About This Site

ARTICLES, PAPERS and PRESENTATIONS --- Authors Beginning with 'G' Gagnon, Larry From Log Files to Litigation - Making Electronic Evidence Count [PP Presentation] November 2006 Gallo, Vince Securing Evidence and Preparing it for Court [PDF] July 2005 Gangolly, Jagdish S. Introduction to Computer Forensics [PP Presentation] April 2006 Gao, Yun, Golden G. Richard III & Vassil Roussev Bluepipe: A Scalable Architecture for On-the-Spot Digital Forensics [PDF] Summer 2004 Garber, Lee EnCase: A Case Study in Computer-Forensic Technology [PDF] January 2001 Garcia, Arlene Fight Crime and Improve Security with Data Mining [PP Presentation] February 2003 (from archive.org) Garcia, Danny Vista - BitLocker Forensics - EnCase ScreenShots September 2007 Garcia, Gabriela Limon Forensic physical memory analysis: an overview of tools and techniques [PDF] October 2006 García, Jess Proactive & Reactive Forensics [PDF Presentation] September 2005 Web Forensics [PDF Presentation] February 2006 Gardenghi, Matt Forensic Analysis of the Vista Recycle Bin [Word doc & script] October 2007 Garfinkel, Simson L. A Web Service for File Fingerprints: The Goods, the Bads, and the Unknowns [PDF] 2003 AFF: A New Format for Storing Hard Drive Iamges [PDF] February 2006 Anti-Forensics: Techniques, Detection and Countermeasures [PDF] January 2007 Anti-Forensics: Techniques, Detection and Countermeasures [PDF Presentation] March 2007 Carving Contiguous and Fragmented Files with Fast Object Validation [PDF] May 2007 Clean Delete [PDF Presentation] April 2006 "Complete Delete" and other Patterns for Information Eradication [PDF Presentation] October 2005 Computer Forensics: Technology, Policy and Countermeasures [PDF] May 2007 (Large Download) Computer Forensics: Technology, Policy and Countermeasures [PDF Presentation] June 2007 Cross-Drive Analysis and Forensics [PDF] November 2005 Disk Sanitization and Cross Drive Forensics [PDF Presentation] September 2005 Document & Media Exploitation [PDF] Nov/Dec 2007 Everything You Need to Know About the Destruction of Information on Computer Hard Drives [PDF Presentation] May 2006 Forensic Corpora: A Challenge for Forensic Research [PDF] April 2007 Forensic Feature Extraction and CrossDrive Analysis [PDF] May 2006 Forensic feature extraction and cross-drive analysis [PDF] August 2006 Forensics Wiki February 2006 Hard-Disk Risk 2003 Information Leakage and Computer Forensics [PDF Presentation] February 2006 Network Forensics: Tapping the Internet April 2002 New Directions in Disk Forensics [PDF Presentation] January 2006 Remembrance of Data Passed: Used Disk Drives and Computer Forensics [PDF Presentation] 2004 The Drives Project - From Disk Forensics to Media Exploitation [PDF Presentation] October 2007 Tools of Evidence March 2003 Garfinkel, Simson L. & David J. Malan One Big File Is Not Enough: A Critical Evaluation of the Dominant Free-Space Sanitization Technique [PDF] June 2006 Garfinkel, Simson L., David J. Malan, Karl-Alexander Dubec, Christopher C. Stevens, & Cecile Pham An Advanced Forensics Format: An Open, Extensible Format for Disk Imaging [PDF] March 2006 The Advanced Forensics Format Library and Tools [PDF Presentation] January 2006 Garfinkel, Simson L. & Abhi Shelat Fingerprinting Your Files August 2004 Garner, George Forensic Acquisition Utilities Revised July 12, 2007 Garrett, Jim Overcoming Reasonable Doubt in Computer Forensic Analysis [PDF] July 2006 Garrison, Dale Regional Computer Forensic Laboratories Nov/Dec 2003 Gaudin, Sharon Case Study of Insider Sabotage: The Tim Lloyd/Omega Case [PDF] A detailed discussion of the investigation into the placement and analysis of a 'logic bomb'. Gavin, Michael CSI: Cyberspace Investigations, Evidence, And Forensics in the Digital World [PP Presentation] September 2005 Geiger, Matthew Counter-Forensic Tools: Analysis and Data Recovery [PDF Paper & PDF Presentation] June 2006 Evaluating Commercial Counter-Forensic Tools [PDF] August 2005 Geiger, Matthew & Lorrie Faith Cranor Computer-Forensic Privacy Tools: A Forensic Evaluation [PDF] June 2005 Genco, Elizabeth Learning by Doing April 2002 Genovezos, George Intro to forensics: Using the last command to track down changes January 2003 Geradts, Zeno Second thematic Workshop forensic implications combined with the workshop on forensic profiling: Crime control and due process [PDF] May 2006 Geradts, Zeno & Arnout Ruifrok Extracting forensic evidence from biometric devices [PDF] 2003 Forensic Implications of Identity Management Systems [PDF Presentation] February 2006 Geradts, Zeno & Peter Sommer [Editors] Forensic Implications of Identity Management Systems [PDF] January 2006 Gerber, Matthew & John J. Leeson Shrinking the Ocean: Formalizing I/O Methods in Modern Operating Systems [PDF] June 2002 GetSecure AFIRM (Active Forensic Intelligent Response Method) [PDF] The S.A.N.E. approach to computer forensics GFI Software The need for effective event management November 2006 Ghosh, Ajoy Guidelines for the Management of IT Evidence [PDF] March 2004 Guidelines for the Management of IT Evidence [PP Presentation] March 2004 (from archive.org) Gibson, Chris SIRT & Forensics [PDF Presentation] March 2005 Gillam, Wm. Blair & Marc Rogers File Hound: A Forensics Tool for First Responders [PDF] August 2005 Related Presentation [PDF] Gilmore, Karen A., Serge P. Linnyk, Kevin McPeak, Idoya Oscariz & Michael J. Stottle Computer Forensic Science: A Methodology [Word Document] 2001 Giordano, Joseph & Chester Maciag Cyber Forensics: A Military Operations Perspective [PDF] Summer 2002 Gips, Michael Vulnerability Identified in Fax Machines and Printers August 2001 Excerpt from the News and Trends column of Security Management Online Gittings, Keith R. Where Data Hides and Resides - Understanding Hidden Data in Windows [PDF] April 2004 Gladyshev, Pavel Adding real time into state machine analysis of digital evidence [PDF] 2006 Finite State Machine Analysis of a Blackmail Investigation [PDF] May 2005 State Machine Theory of Digital Forensic Analysis 2004 State Machine Theory of Digital Investigations [PP Presentation] 2005 Gladyshev, Pavel & Andreas Enbacka Rigorous Development of Automated Inconsistency Checks for Digital Evidence Using the B Method [PDF] Fall 2007 There is Something Fishy About Your Evidence… or How to Develop Inconsistency Checks for Digital Evidence Using the B Method [PDF] June 2006 Gladyshev, Pavel & Ahmed Patel Formalising Event Time Bounding in Digital Investigations [PDF] Fall 2005 Glaser, J.D. Intrusion Auditing with NTLast [PP Presentation] Gleason, B.J. Digital Forensics [PDF Presentation] March 2006 Digital Forensics - Finding information that has been lost... [PDF Presentation] April 2004 FOSS Digital Forensics [PDF Presentation] June 2006 Gleason, B.J. & Drew Fahey Helix 1.7 for Beginners [PDF] Updated March 2006 Glod, Maria Loudoun's AOL Detective Finds Clues in E-mail August 2000 Gluzinski, Thomas A. & John Kida Managing your Evidence Problems associated with proper collection procedures [PDF] Godfrey, Michael B. netForensics® – A Security Information Management Solution [PDF] 2002 Godfrey, Ronald M. Forensic Toolkit Analysis of a Windows 98 Virtual PC Hard Drive [PDF Presentation] 2006 Godwin, Colin Computer Forensics: Do You Have the Right Stuff? [PP Presentation] March 2007 Goel, Ashvin, Wu-chang Feng, David Maier, Wu-chi Feng, & Jonathan Walpole Forensix: A Robust, High-Performance Reconstruction System [PDF] June 2005 Goings, Edward L. Cyber Crime: Theft of a Trade Secret [PDF Presentation] February 2004 Investigating The Fraud, Recovering Digital Evidence, and Assessing Damages Golden, Colin Computer Forensics An Overview [PDF Presentation] 2006 Golubev, Vladimir A. Initial investigating actions related to detecting cyber crimes Tactical Features of Inquiry Actions at Computer Crime Investigation May 2003 Golubev, Vladimir & Alexander Golovin Problems of Investigation of Crimes in the Field of Banking Computer Systems Gonsalves, Antone Preserve and Protect February 2004 Log files can make or break your case in court. Here's how to preserve the evidence. Goode, Amanda Forensic extraction of electronic evidence from GSM mobile phones [PDF Presentation] 2001 Goodger, Ben IP & Cybercrime [PDF] February 2003 (from archive.org) Goodrich, Michael T., Mikhail J. Atallah, & Roberto Tamassia Indexing Information for Data Forensics [PDF] June 2005 Gordon, Marne E. Planning for Failure: Developing an Effective Incident Response Plan for HIPPA Compliance [PP Presentation] September 2003 Grace, Scott Computer Incident Response and Computer Forensics Overview [PDF] March 2001 Graf, Francis Forensic Computer Investigations & Data Recovery [PDF Presentation] January 2003 Step Away from the Keyboard! [PDF Presentation] February 2004 Graham, Robert FAQ: Firewall Forensics (What am I Seeing?) June 2000 Granado, Jose Computers Forensics [PP Presentation] June 2002 Grance, Tim, Suzanne Chevalier, Karen Kent & Hung Dang Guide to Computer and Network Data Analysis: Applying Forensic Techniques to Incident Response [PDF] August 2005 Grand, Joseph Handheld Forensics: Palm and Beyond [PDF Presentation] June 2005 Mobile Device Insecurity [PDF Presentation] April 2005 pdd: Memory Imaging and Forensic Analysis of Palm OS Devices [PDF] March 2002 Memory Imaging and Forensic Analysis of Palm OS Devices [PDF Presentation] June 2002 (from archive.org) Mobile Device Security page - small collection of tools Grannick, Jennifer Seizing and Searching Computers and Computer Data [RTF doc] 2000 Grant, Jerry R. Computer Forensics - Issues in Pornography Cases [PDF Presentation] February 2007 Computer Forensics - Issues In Pornography Cases [PDF] May 2007 Grant, Jerry & Troy Schnack Computer Forensics [PDF] September 2006 Gratzer, V., D. Naccache, & D. Znaty Law Enforcement, Forensics and Mobile Communications [PDF] March 2006 National Security, Forensics and Mobile Communications [PP Presentation] March 2006 Green, Robert P. & Scott Cooper Computer Sleuth - Beating down the evidence trail with computer forensics [PDF] April 2003 Green, Ron J. Our Perspective of Computer Forensics and Electronic Discovery in Our Corporate Environment [PDF Presentation] November 2005 Gregg, Michael C. The Certified Computer Examiner Certification January 2004 Grimes, Roger A. Honeypots for Windows Chapter 11 - Honeypot Data Analysis [PDF] June 2005 The Grimmace Computer Cop Prophile Grindstaff, J. Frank Computer Forensics in Litigation [PP Presentation] December 2005 (from archive.org) Introduction to Computer Forensics [PP Presentation] 2006 (from archive.org) Starting your own Computer Forensics Company [PP Presentation] (from archive.org) Starting your own Computer Forensics Company [Word doc] (from archive.org) Grocki, Stephen J. & Lam D. Nguyen How Computer Forensics Can Dramatically Improve a Case [PDF] November 2006 Page 24 Gross, Bruce eDanger.com [PDF] Winter 2005 Gross Computer Forensics Computer Under the Microscope Images Grothe, Andrew Bootable CD-Rom Linux Security Toolkits [PDF Presentation] September 2003 Gruhl, Jens IT based crime: Evidence Collection & Legal Restrictions in Investigation Cases [Zipped PDF & Presentation] September 2007 Grundy, Barry Forensic Examiner's Introduction to Linux - A Beginner's Guide to Linux as a Computer Forensic Platform [PDF] October 2007 The Law Enforcement and Forensic Examiner's Introduction to Linux A Beginner's Guide Version 2.55 [PDF] September 2006 From NASA ftp site; also has practical exercises The Law Enforcement and Forensic Examiner Introduction to Linux A Beginner's Guide Version 2.0.5 [PDF] January 2004 Alternate Download Site The Law Enforcement Introduction to Linux A Beginner's Guide Version 1.8.1 [PDF] 2001 Grunwald, Lucas Digital Forensic [PDF] January 2004 Digital Forensic Analysis [PDF Presentation] 2005 Searching for Evidence - Digital Forensic Analysis [PDF] January 2004 Gudaitis, Dr. Terry Investigations: Using Internet Data Sets for Profiling [PDF Presentation] June 2006 Adding Profiling and Analysis of Open Source Data to Forensic Investigations Using Cyber Intelligence in Cybercrime Profiling and Incident Assessment [PDF Presentation] June 2007 Guerts, John Evidence on the Internet [RTF doc] Guidance Software EnCase® Version 6 Update [PDF Presentation] June 2007 EnCE® Study Guide Version 6 [PDF] May 2007 Gupta, Ajay & Scott Laliberte Defend I.T.: Security by Example Chapter 15 - Executive Fraud [PDF] May 2004 A case study of computer forensics Gupta, Chetan K. Browser Secrets Unveiled! January 2006 Data Carving Issues! December 2006 Disk Imaging Approaches December 2006 Dissecting NTFS Hidden Streams July 2006 File Slack Vs RAM Slack Vs Drive Slack June 2006 Incident Response & Computer Forensics [PP Presentation] September 2005 Laptop Imaging Simplified May 2006 LINReS - An open source Linux Incident Response Tool! July 2006 Mining Digital Evidence in Microsoft Windows – Answering Who, When, Why and How [PP Presentation] December 2007 Tracing Emails January 2006 UserAssist Revisited! July 2006 XP Built-in monitoring feature May 2006 Discusses UserAssist feature Gupta, Gaurav, Chandan Mazumdar & M. S. Rao Digital Forensic Analysis of E-Mails: A Trusted E-Mail Protocol [PDF] Spring 2004 Gupta, Mayank R., Michael D. Hoeschele & Marcus K. Rogers Hidden Disk Areas: HPA and DCO [PDF] September 2006 Gurushanta, Vigi "e-Evidence Standard": Proving the integrity, reliability, and trust on electronic records [PDF] June 2002 Gutierrez, Asier Forensic analysis using correlation of Unix logs [PDF] Gutmann, Peter Data Remanence in Semiconductor Devices August 2001 Paper presented at USENIX. Discusses issues in static and dynamic RAM, CMOS circuitry, and EEPROMs and flash memory. How Windows encrypts .PWL files November 1995 Secure Deletion of Data from Magnetic and Solid-State Memory July 1996 Back to Top © 2006-2008 All rights reserved