HOME * THE * Digital Forensics Biblio What's New This Month! Blogs and Wikis Topic-Specific Resources The Other 'Good Stuff' Digital Forensic Books Links to Links About This Site

ARTICLES, PAPERS and PRESENTATIONS --- Authors Beginning with 'M' Mack, Marisa Network Forensics - CSI: Enterprise December 2004 Network Forensics Tools November 2004 Maclean, Nicholas Paul Acquisition and Analysis of Windows Memory [PDF] April 2006 Maertens, Filip Computer Forensics Workshop - Procedures and Methodology when responding to incidents [PDF Presentation] 2006 Magnas, Bjarne The use of Levenshtein distance in computer forensics [PDF] June 2005 PP Presentation Magnus, Nils Computer Forensics - Integrating Technical and Procedural Tasks [PDF Presentation] November 2003 Maher, Marc Becoming a Forensic Investigator [PDF] August 2004 Writing a Computer Forensic Technical Report [PDF] August 2004 Mahoney, Bob Hot Topics, Current Events, and Random Observations [PDF Presentation] August 2007 Malinowski, Christopher Information Systems Forensics: A Practitioner's Approach November 2004 Mallery, John Anti-forensics: What the bad guys are doing [PP Presentation] September 2007 Digital Data in the Enterprise: Do You Have it Under Control? [PDF Presentation] May 2006 Document Life Cycle Management [PP Presentation] November 2006 Secure File Deletion, Fact or Fiction? [PDF] July 2001 Good discussion of clusters, temp. files, deleted files, SLACK, etc. Secure File Deletion: Fact or Fiction? [PDF] Updated June 2006 What's on that Hard Drive? July 2001 Why Conduct Computer Forensics Examinations? [PP Presentation] 2003 Malter, Bruce Electronic Data Discovery and Data Forensics - The Identification and Collection of Electronic Files [PDF Presentation] April 2005 Mancini, Steve RAPIER: A 1st Responders Information Acquisition Framework [PDF Presentation] February 2007 Mancini, Steve & Joe Schwendt RAPIER – A 1st Responders Info Collection Tool [PDF Paper & PDF Presentation] June 2006 Mandia, Kevin Initial Response to Windows NT/2000 [PDF] Performing Effective Incident Response [PDF Presentation] July 2005 The Evolution of Incident Response [PDF Presentation] 2004 The State of Incident Response [PDF Presentation] June 2007 The State of Incident Response [PP Presentation] August 2007 Manson, Dan, Anna Carlin, Steve Ramos, Alain Gyger, Matthew Kaufman, & Jeremy Treichelt Is the Open Way a Better Way? Digital Forensics Using Open Source Tools [PDF] January 2007 Manson, Kevin Robots, Wanderers, Spiders and Avatars: The Virtual Investigator and Community Policing Behind the Thin Digital Blue Line [PDF] March 1997 Manzano, Yanet Computer and Network Forensics (CNF) Project Homepage Computer and Network Forensics as an Integral Component of the Information Security Enterprise [PP Presentation] 2003 Forensics and Active Protection [PP Presentation] March 2003 Hacking, Learning to Prevent it by Knowing more About it [Presentation] January 2000 Honeytraps As A Forensic Tools [Presentation] February 2002 Honeytraps, a Network Forensic Tool [PP Presentation] February 2002 Honeytraps as Forensic Tools [PP Presentation] Fall 2001 Overview of Computer Forensics [Presentation] Fall 1999 Policies to Enhance the Forensic of Network Security April 2000 [Ghostscript Reader Required] Policies to Enhance the Forensic of Computer Security (complete presentation, 63 slides) April 2000 Software Forensics Overview [PDF Presentation] April 2003 Manzano, Yanet and Alec Yasinsac Policies to Enhance Computer and Network Forensics [PDF] Marcella, Albert, and Robert Greenfield Cyber Forensics: A Field Manual for Collecting, Examining, and Preserving Evidence of Computer Crimes. Table of contents and introduction [PDF] Chapter 3 The Liturgical Forensic Examination: Tracing Activity on a Windows-Based Desktop [PDF] Marchany, Randy Internet Security & Incident Response: Scenarios & Tactics [PP Presentation] 1998 Mares, Dan What Forensic Analysts should know about NT Alternate Data Streams What Time is it? The Problem Marko, Chris Beginners Guide to Linux Forensics [PDF] June 2005 Introduction to Linux Forensics [PDF] June 2005 Introduction to Linux Forensics [PP Presentation] June 2005 Introduction to The Sleuth Kit (TSK) [PDF] September 2005 Marofsky, Brian Reflections on a first computer forensic investigation October 2006 Marrington, Andrew, George Mohay, Andrew Clark, & Hasmukh Morarji Event-based Computer Profiling for the Forensic Reconstruction of Computer Activity [PDF] May 2007 Marshall, Angus An Improved Protocol for the Examination of Rogue WWW Sites [PDF] July 2003 Digital Evidence [PP Presentation] 2004 More Than CSI: High-Tech Crime Investigation [PP Presentation] 2004 PDF Format Marshall, Angus & B.C. Tompsett Silicon Pathology? [PDF] June 2003 The future of forensic computing Spam & Chips - A Discussion of Internet Crime [PDF] April 2002 Marshall Information Security and Digital Evidence Forensic Tool Testing & Validation Publications [PDF] 2006 Marsico, Christopher V. Digital Music Device Forensics [PDF or PS] May 2005 Marsico, Christopher V. & Marcus K. Rogers Ipod Forensics [PDF] December 2004 Ipod Forensics [PDF] Fall 2005 Martin, Antonio FireWire Memory Dump of a Windows XP Computer: A Forensic Approach [PDF] April 2007 Martin, Brian Not Just a Game Anymore 1999 Martin, Damon Windows, NTFS and Alternate Data Streams [PDF] May 2001 Martin, Jean-Christophe & Thomas Plos Collecting Forensic Evidence [PDF Presentation] May 2005 Martinez, Javier Mobile Forensics [PDF Presentation] October 2007 Mobile Forensics [PDF Presentation] June 2007 Maryland State Police General Guidelines for Seizing Computers and Digital Evidence Introduction to Digital Evidence Seizure [PDF Presentation] September 2003 Marziale, Lodovico, Golden G. Richard III, & Vassil Roussev Massive threading: Using GPUs to increase the performance of digital forensics tools [PDF] August 2007 Mason, Stephen Digital Evidence [PP Presentation] August 2007 Trusted computing and forensic investigations [Available by request] 2005 Masters, Gerry & Philip Turner Forensic data recovery and examination of magnetic swipe card cloning devices [PDF] August 2007 Matysik, Bill FBI Cyber Crime Program Philadelphia Division [PP Presentation] 2003 (from archive.org) Maurer, Chris Computer Forensics: Are Your Computers Free from Attacks and Problems? July 2005 Maurer, Ueli New Approaches to Digital Evidence [PDF] Maybank, James Forensic Analysis for Unix-Based Operating Systems [PDF] October 2005 McAnn, Justin & Frank Enfinger The Real World: Forensics - EnCase vs FTK [PDF Presentation] October 2006 McCarthy, Paul Forensic Analysis of Mobile Phones [PDF] October 2005 ZSAP (Zero Skill Analysis Program) [PDF] January 2006 McCombie, S. & M. Warren Computer Forensics: An Issue of Definitions [PDF] 2003 McCormick, John & Deborah Gage Shadowcrew: Web Mobs March 2005 McCreight, Shawn and John Patzakis Hash Sets and Their Proper Construction [PDF] McCrone, John Forensic Computing: A look at evidence and how to handle it October 1997 McDonald, William & Robert Morgester Cellular Technology [PP Presentation] McDougal, Monty Forensic Analysis: Windows Forensic Toolchest (WFT) [PDF] Updated May 2005 GCFA Practical Discussing WFT Live Forensics on a Windows System: Using Windows Forensic Toolchest (WFT) [PDF Presentation] June 2006 What Is New With Windows Forensic Toolchest™ (WFT) v3.0 [PDF Presentation] July 2007 Windows Forensic Toolchest™ (WFT) v3.0 download Windows Forensic Toolchest [PDF Presentation] May 2005 McFarland, Robert E. Incident Handling: The Art of Containing Compromised Information [PDF] December 2000 McGrath, Kevin P. & John Nelson FLUX: A Forensic Time Machine for Wireless Networks [PDF] April 2006 FLUX: A Forensic Time Machine for Wireless Networks [PDF Presentation] April 2006 McGrath, Niall, Mícheál Ó hÉigeartaigh & Pramod Pathak A Computer Forensic Methodology for Ireland [Word document] July 2003 McGuire, Timothy J. & Karon N. Murff Issues in the development of a digital forensics curriculum [PDF] December 2006 (Registration required) McKemmish, Rodney Computer Forensics [PP Presentation] May 2005 What is Forensic Computing? [PDF] June 1999 McLachlan, Donald Contacting Host Owners 2004 McLain, G. Robert Jr. United States V. Hill: A New Rule, But No Clarity for the Rules Governing Computer Searches and Seizures [PDF] Summer 2007 McLean, Det. Lt. John J. Basic Considerations in Investigating Computer Crime, Executing Computer Search Warrants and Seizing High Technology Equipment [PDF] March 1999 Corporate & L.E. Internet Undercover Approaches & Investigations: "The Risks & The Benefits" [PP Presentation] October 2006 Search Warrants Computers & Digital Evidence [HTML-framed Presentation] November 2005 McMillan, Jim Importance of a Standard Methodology in Computer Forensics [PDF] May 2000 McMillon, Matthew Building a Low Cost Forensics Workstation [PDF] April 2003 McNamara, Joel Secrets of Computer Espionage: Tactics and Countermeasures Chapter 1: Spies [PDF] June 2003 McNemar, Christopher M. Forensic Analysis of Digital Evidence from Palm Personal Digital Assistants [PDF] Fall 2004 McQuown, Richard F. "Carving" out pictures from a Handset (FTK) October 2006 Cell Phone , PDA, Smart Phone, Device, Handset page October 2006 Checklist for Conducting Cell Phone Forensic Exams [Word doc] October 2006 "Guillotine Method" for Acquiring RAM Dumps 2007 Other 'Memory Analysis' Resources Mead, Steve Unique File Identification in the National Software Reference Library [PDF] May 2006 Viability of MD5 and SHA-1 for Forensic Hashing [PDF Presentation] November 2006 Medford, MA Police Department Presentations/Forms/Publications - Internet Safety page Meehan, A., G. Manes, L. Davis, J. Hale, S. Shenoi Packet Sniffing for Automated Chat Room Monitoring and Evidence Preservation [PDF] June 2001 Melia, John J. Linkin' Logs To Fraud November 2002 Mellars, Barrie Forensic examination of mobile phones [PDF] 2004 Volume 1 Issue 4 - Registration required Memon, Nasir ForNet: A Distributed Forensics Network [PDF Presentation] 2003 Mendell, Ronald L. Computer Crime Investigator's Toolkit January 2001 Parts I, II, III and IV Incident Management with Law Enforcement December 2001 Menz, Mark. J. Creating a Boot Media [PDF Presentation] 2005 The Art, Science & Practice of Digital Evidence [PP Presentation] 2004 Wrinkle in Time [PP Presentation] 2006 Menz, Mark & Steve Bress The Fallacy of Software Write Protection in Computer Forensics [PDF] May 2004 Mercuri, Rebecca T. Challenges in Forensic Computing December 2005 Merkel, Hans-Peter Case Study: Live Analysis of a Compromised Linux Server [PDF Presentation] September 2006 Merrill, Charles R., Esq. Time is of the Essence March 2000 Metz, Joachim EWF Specification [PDF] Updated January 2007 Expert Witness Compression Format specification Meyer, Craig W. and Gary M. Morgan Investigative Uses of Computers: Analytical Time Lines [PDF] August 2000 Meyer, Doreen Computer Forensics and Encase [PP Presentation] July 2006 Meyer, Doreen & Robert Ono Emerging Web Technologies [PP Presentation] July 2006 Meyers, Matthew Computer Forensics: Toward Creating a Certfication Framework [PDF or PS] May 2005 Meyers, Matthew & Marc Rogers Computer Forensics: Meeting the Challenges of Scientific Evidence [PDF] December 2004 Computer Forensics: The Need for Standardization and Certification [PDF] Fall 2004 Michalowicz, Michael Data Forensics: In Search of the Smoking Gun March 2005 Michaud, Diana Adventures in Computer Forensics [PDF] September 2001 Micro Systemation AB Short presentation of the XRY system & application [PDF Presentation] 2006 Microsoft TechNet Fundamental Computer Investigation Guide For Windows January 2007 Mikkilineni, Aravind, Osman Arslan, Pei-Ju Chiang, Roy M. Kumontoy, Jan P. Allebach, George T.C. Chiu, & Edward J. Delp Printer Forensics using SVM Techniques [PDF] 2005 Mikus, Nicholas An Analysis of Disk Carving Techniques [PDF] March 2005 Miles, Dr. Greg Computer Forensics: A Critical Process in Your Incident Response Plan [PP Presentation] July 2001 Miller, Matthew K. Creating a Computer System Incident Response Team [PP Presentation] July 2001 (from archive.org) Miller, Roland E. III GCFA Practical Assignment [PDF] September 2002 A detailed forensic analysis of a Mac OS X system using primarily open source forensic utilities. Mills, Michael Apple Forensics Solutions Briefing [PDF Presentation] October 2007 Mindgrove, Ltd. Hackers, Crackers, E-Fraud & Forensics [PDF] May 2006 Mink, Martin A Comparative Study of Teaching Forensics at a University Degree Level [PDF Presentation] October 2006 Minutiae Issue #66 Electronic Fingerprints: Computer Evidence Comes of Age Mislan, Richard P. Acquisition of a Palm OS PDA using @Stake’s Palm dd, Paraben’s PDA Seizure, and Guidance Software’s EnCase [PDF] 2004 Mitchell, Kimberly J., Janis Wolak & David Finkelhor Police Posing as Juveniles Online to Catch Sex Offenders: Is It Working? [PDF] July 2005 Mitchison, Neil The challenge of electronic evidence: the European response [PDF Presentation] November 2003 Mobley, Paul T. Computer Forensics: The Investigator's Perspective [PP Presentation] September 2000 Mocas, Sarah, George Heuston, Warren Harrison, Mark Morrissey & John Richardson High Tech Forensics: Serving as a Police Reserve Specialist [PDF] Model Code of Cybercrimes Investigative Procedures Article I - Preliminary Matters Article II - Challenges and Sanctions Article III- Preserving Evidence Article IV - Obtaining Evidence: Interception & Surveillance Article V - Undercover Operations and Informants Article VI - Obtaining Evidence: Production Orders Article VII - Obtaining Evidence: Search and Seizure Article VIII - Post-Collection Procedures Article IX - Processing and Analyzing Evidence Article X - Reimbursement and Return of Property Article XI - Using Evidence Mohay, George Filesystem and network acquisition and analysis tools [PDF Presentation] November 2005 Mokhonoana, Pontjho M. & Martin S. Olivier Acquisition of a Symbian Smart Phone’s Content with an On-Phone Forensic Tool [PDF] September 2007 Molisani, Jack Warning! Microsoft Word stores hidden information about you May-June 2005 Mollman, Steve Digging for computer dirt April 2002 Monaghan, Edward Computer Crime Investigations: A Lo-Tech Practical Approach [HTML and PP Presentation versions] October 2000 Monniez, Christophe & Geert Van Acker FCCU GNU/Linux Forensic Boot CD [PDF Presentation] October 2005 Alternate Link & USB image used during the workshop Monroe, Klayton & Dave Bailey System Baselining - A Forensic Perspective [PDF] Montanero, Domingo The Computer Forensics Challenge and Anti-Forensics Techniques [PDF Presentation] November 2007 Montogomery, Brad Computer Evidence - Collection and Preservation and Submission [PDF Presentation] October 2005 Monti, Andrea The Legal Duty of IAP's to Preserve Traffic Data : a Dream or a Nightmare? [PP Presentation] May 2003 Monti, Cristin (The Compiler - journal) High-Tech Evidence Gathering: Tapping into the Computer Criminals 1999 Mookhey, K. K. Computer Forensics [PDF Presentation] Moore, Edwin How to Use Computer Forensics for Internal Employee Issues [PDF] July 2005 Moore, Ossie J. H. Use A Linux Bootable CDROM to Image Your Hard Drive August 2003 Moore, Tyler The Economics of Digital Forensics [PDF] May 2006 Moore, Tom Real-Time Forensics Strategies: An Executive Briefing [Word document] Morfitt, Kim Enhancing the Forensic ICQ Logfile Extraction Tool [PDF] December 2006 Structural Analysis of the Log Files of the ICQ Client Version 2003b [PDF] December 2006 Morfitt, Kim & Craig Valli After Conversation - An Forensic ICQ Logfile Extraction Tool [PDF] September 2005 Morgester, Robert M. Digital Photographs (in the courtroom) [PP Presentation] Morris, Craig Using Windows FIND to locate files with unprintable characters 2006 Morris, Daniel A. Tracking a Computer Hacker May 2001 Morris, Jamie Forensics on the Windows Platform, Part One January 2003 Forensics on the Windows Platform, Part Two February 2003 Maintaining System Integrity During Forensics August 2003 Notes On Vista Forensics, Part One March 2007 Notes On Vista Forensics, Part Two April 2007 Motlekar, Shaheem [Paladion Networks] Incident Handling/Forensics FAQ Moulton, Scott A. Animated Hard Drive Recovery & Physical Rebuilds [Flash Presentation] August 2006 Computer Forensics: Error in Judgment [PDF Presentation] November 2006 Data Recovery Whitepaper 2007 Advanced Hard Drive Data Recovery Part 1 [YouTube Video] Advanced Hard Drive Data Recovery Part 2 [YouTube Video] Advanced Hard Drive Data Recovery Part 3 [YouTube Video] Advanced Hard Drive Data Recovery Part 4 [YouTube Video] Advanced Hard Drive Data Recovery Part 5 [YouTube Video] Rebuilding Drives for Data Recovery - Anatomy of a Hard Drive [Flash & Video] August 2006 Moylan, Detective Bill Computer Forensics Methodologies [PDF Presentation] May 2005 Database Record Extraction Preparing for the High Tech Investigation [PDF Presentation] Mueller, Lance Computer Forensics, Malware Analysis & Digital Investigations [Blog] 2007 Variety of Enscripts and How-to's First Looks: Basic Investigations of Windows Vista [PP Presentation] June 2007 How to Create a Reverse SSH Tunnel and Use Encase Enetrprise to Snapshot/Preview or Acquire a Machine that is Protected on the Inside of a Network [PDF] Muir, Hazel Email traffic patterns can reveal ringleaders March 2003 Muller, Jon His Homepage Computer seizure interview questions [Word Doc] Digital Warrants Language for a proposed California law dealing with computer search warrants. Encase Decryption System [PDF] Forensic Checklist [PDF] Mac Acquisition using Target Disk Mode Pedo Terms: Keywords for searching Internet cache Mung, Manfred & Alan S. H. Lam Honeypot: Hacker Tracking and Computer Forensics AND Honeynet: A Platform for Studying Hacker Behaviors and Computer Forensics [Presentations in PDF] August 2003 Murdoch, Don Linux/UNIX Security Response Cookbook [PDF Presentation] June 2004 Murdoch, Greg Using ATA commands on hard disks ... why bother? April 2006 Murphy, Daniel Search, Seizure and Production Orders Considering the Privacy Environment [PP Presentation] March 2005 Murphy, Jack J. Forensic Readiness [PDF Presentation] February 2006 Murphy, Dr. Rich Vista Log Forensics [PDF Presentation] August 2007 Murphey, Rick Automated Windows event log forensics [PDF] August 2007 Murray, Christopher Patrick Network Forensics (from archive.org) Musters, Marty Cell Phone Forensics [PDF] February 2006 The Trojan Horse Defence [PDF] December 2005 Myspace.com Law Enforcement Information Handout [PDF] Back to Top © 2006-2008 All rights reserved