HOME * THE * Digital Forensics Biblio What's New This Month! Blogs and Wikis Topic-Specific Resources The Other 'Good Stuff' Digital Forensic Books Links to Links About This Site

ARTICLES, PAPERS and PRESENTATIONS --- Authors Beginning with 'R' RCFL Digital Evidence Field Guide [PDF] 2007 Guidelines for the Handling and Seizure of Digital Evidence [PDF] Windows Vista Forensic Quick Start [Word doc] 2007 RCMP Technical Security Branch Hard Drive Secure Information Removal and Destruction Guidelines [PDF] October 2003 Radack, Shirley Forensic Techniques: Helping Organizations Improve Their Responses to Information Security Incidents September 2006 Radcliff, Deborah Cybersleuthing solves the case January 2002 Firms increasingly call on cyberforensics teams January 2002 Forensic Detectives January 2002 Handling Crime in the 21st century The new field of computer forensics is keeping security experts on the trail of cybercriminals - December 1998 Hunting Hackers: How to Fight Back Radvanovsky, Bob Intro in IT Forensics Mgmt [PDF] June 2004 Raio, Stephen & Christina King FIRE: Forensic & Incident Response Environment [PP Presentation] November 2003 Ramabhadran, Anup Forensic Investigation Process Model For Windows Mobile Devices [PDF] August 2007 Ramani, B. Acquisition & Seizure Procedure [PP Presentation] 2005 Cyber Forensics - Challenges and Tools [PP Presentation] 2005 Cyber Forensics - Challenges, Techniques and Tools [PP Presentation] 2005 Cyber Forensics Tools [PP Presentation] 2005 Cyber Forensics and C-DAC’s Forensic Tools [Word doc] 2005 Ramirez, Roman The Exchange Principle [PDF] September 2004 Rankin, Kyle System Rescue with Knoppix [Presentation] September 2005 Ranum, Marcus Burglar Alarms for Detecting Intrusions [PDF] 2000 Intrusion Detection and Network Forensics [PP Presentation] April 2000 Questions About the Future Secure Business Quarterly 2001 [PDF] What is the meaning of evidence in an environment where crime scenes themselves are mutable and can be altered, destroyed, or even created in milliseconds? Raskin, Victor, Christian F. Hempelmann, & Katrina E. Triezenberg Semantic Forensics: An Application of Ontological Semantics to Information Assurance [PDF] July 2004 Rathore, Balwant Incident Response Toolkit [PDF Presentation] August 2003 Raynal, Frederic, Yann Berthier, Philippe Biondi, & Danielle Kaminsky Honeypot forensics [PDF] JUne 2004 Recor, Jeff & Brian Gawne Performing a Security Forensics Review [PDF Presentation] October 2005 Red Hat Linux 8.0: The Official Red Hat Linux Security Guide Chapter 11. Incident Response Redmon, Barbara Jones Maintaining Forensic Evidence for Law Enforcement Agencies from a Federation of Decoy Networks: An Extended Abstract [PDF] Fall 2002 Redmond, Sharren Creating Hash Sets Manually [PDF] Reining, Christopher J. Analysis of a Compromised Honeypot Reino, Alfredo Forensics of a Windows system [PDF Presentation] September 2005 Reith, Mark, Clint Carr, & Gregg Gunsch An Examination of Digital Forensic Models [PDF] Fall 2002 Rennich, Joel Forensic Analysis of a Compromised Mac OS X (Client) Machine May 2002 Reyes, Anthony, Richard Brittson, Kevin O'Shea, & Jim Steel Cyber Crime Investigations Chapter 1 - The Problem at Hand [PDF] March 2007 Rich, Kevin Incident Response Planning and Forensic Readiness [PP Presentation] February 2002 (from archive.org) Richard, Dr. Golden G. III An Introduction to Digital Forensics [PP Presentation] 2005 (16MB) Digital Forensics [PP Presentation] October 2005 Intro to Digital Forensics: State of the Art + Some Important Research [PP) Presentation] October 2007 Linux and Digital Forensics [PP Presentation] November 2006 Next-Generation Digital Forensics [PP Presentation] November 2006 Research in Next-Generation Digital Forensics [PP Presentation] November 2006 Solving Computer Crime: An Introduction to Digital Forensics [PP Presentation] November 2003 Richard, Golden G. III & Vassil Roussev Digital Forensics Tools: The Next Generation [PDF] 2006 Scalpel: A Frugal, High Performance File Carver [PDF] August 2005 Toward Secure, Audited Processing of Digital Evidence: Filesystem Support for Digital Evidence Bags [PDF] 2006 Richard, Jason & Theo Petersen Computer Forensics & Ethical Hacking [PP Presentation] February 2004 Richardson, Steven Compliance and Computer Forensics [PDF] September 2005 Richer, Pierre Steganalysis: Detecting hidden information with computer forensic analysis [PDF] April 2003 Ridder, Chris Evidentiary Implications of Potential Security Weaknesses in Forensic Software [PDF] August 2007 Riden, Jamie Persistence of data on storage media June 2007 Responding to Security Incidents on a Large Academic Network: A Case Study May 2003 – October 2005 [PDF] February 2006 Riggs, David L. Making sense of Windows Install Dates and Times [Word doc] Windows Installation Timestamps [Word doc] Ringold, James S. III Corporate Forensics Toolkit [PP Presentation] April 2004 Risk Analysis Consultants (RAC) RAC Computer Forensic Institute Annual Report [PDF] January 2006 Rist, Oliver Be Prepared for Computer Forensics February 2002 Developing a Response Plan for Computer Forensics February 2002 Robertson, ?? [Dept. of Energy] Cyber Security Incident Response/Forensic Awareness for Managers [PP Presentation] 2003 (from archive.org) Cyber Security Incident Response/Forensic Awareness for System Administrators [PP Presentation] 2003 Cyber Security Incident Response/Forensic Awareness for Users [PP Presentation] 2003 (from archive.org) Roberts, Greg & Gal Shpantzer E-mailed Death Threats: A Case Study... [PDF] PowerPoint Presentation Robertson, Oz Computer Search and Seizure Guidelines [PDF] Fall 2000 Rodokanakis, Phillip Computer Forensics - The FAQs, the Do’s and the Don’ts [HTML-framed Presentation] Incident Response - Preparedness is Essential in Today’s Computing Environment [HTML-framed Presentation] IP Tracing - A Primer in Tracing IP and Email Addresses [HTML-framed Presentation] Roe, Michael Cryptography and Evidence [PDF] Roebuck, Terrance A. Information Technology Security Part 6 Investigation and Forensics I [HTML Presentation] March 2002 Seizing a Computer System for Digital Forensic Systems Examination Time Stamps and Timing in Audit-Based Digital Forensic Systems Examination Rogers, Dr. Marcus Anti-Forensics [PP Presentation] September 2005 Computer Forensics [PDF Presentation] November 2002 Computer Forensics: Evidence Handling & Management [PDF - from Archive.org] September 2002 Cyber Forensics: Are We There Yet? [PP Presentation] 2004 Hard Challenges for Digital Forensics [PDF Presentation] February 2005 Incident Response & Evidence Management [PDF Presentation] November 2002 Rogers, Marcus K., James Goldman, Rick Mislan, Timothy Wedge & Steve Debrota Computer Forensics Field Triage Process Model [PDF] 2006 Rogers, Marcus & Scott L. Ksander Introduction to Cyber Forensics [PDF Presentation] 2006 Rogers, Marcus K. & Kathryn Seigfried The Future of Computer Forensics: A Needs Analysis Survey [PDF] 2003 Rogers, Marcus K., Kathryn Seigfried, & Kirti Tidke Self-reported computer criminal behavior: A psychological analysis [PDF] August 2006 Rogers, Russ Undeleting Files in the Linux OS 2000 Roiter, Neil Cybercop April 2002 Romig, Steve See Talks and Presentations for a listing of these and other resources given by members of the Network Security Group at Ohio State University Computer and Network Investigations [PP Presentation] September 2005 PDF version Correlating Evidence [PP Presentation] August 2000 Correlating Log File Entries [PDF] November 2000 Distributed Attacks and CISCO Net Flow Logs [PDF Presentation] Forensic Computer Investigations [PDF Presentation] February 2007 Forensic Computing [PP Presentation] November 1999 Forensic Computer Investigations [PDF] December 2000 Forensic Computer Investigations [PP Presentation] January 2000 Very good presentation describing in detail specific issues, and possible command utilities that may be used to address them. Stuff [HTML or PP Presentation] January 2001 Romney, Todd Is your data ready for its day in court? [PDF] November 2002 (from archive.org) Rose, Curtis W. Internal Investigation Case Studies [PDF] February 2005 From a Computer Forensics & Incident Response Perspective Introduction to Malware [Zipped PP Presentation] October 2006 Windows Live Incident Response Volatile Data Collection: Non-Disruptive User & System Memory Forensic Acquisition (From archive.org) Rosela, Tony [Maryland State Police] Introduction to Digital Evidence Seizure [PDF Presentation] September 2003 Rosen, Andrew Expert Witness Compression Format Specification Rosenblatt, Kenneth R. How to Investigate Computer Intrusions: A Checklist Ross, Officer Troy C. The Technical Side of Internet & Computer Crime [PP Presentation] April 2003 Rossi, Adam Pinpointing and Locating Data on Digital Media [PDF Presentation] September 2004 Roussev, Vassil, Yixin Chen, Timothy Bourg, & Golden G. Richard III md5bloom: Forensic filesystem hashing revisited [PDF] August 2006 Roussev, Vassil & Golden G. Richard III Breaking the Performance Wall: The Case for Distributed Digital Forensics [PDF] August 2004 Powerpoint Briefing Roussev, Vassil, Golden G. Richard III, & Lodovico Marziale Multi-resolution similarity hashing [PDF] August 2007 Rowlingson, Robert A Ten Step Process for Forensic Readiness [PDF] Winter 2004 An Introduction to Forensic Readiness Planning [PDF] May 2005 An Introduction to Forensic Readiness Planning [PDF Presentation] May 2005 Roy, Anindya Sherlock in Linux December 2003 How to identify and re-claim a compromised Linux machine using TCT Sherlock is Back January 2004 SleuthKit: a collection of new forensic tools Ruchandani, Bhumesh, Manish Kumar, Ashutosh Kumar, Kiran Kumari, & Amitesh Kumar Sinha Experimentation in Network Forensics Analysis [PDF] December 2006 Rude, Thomas And You Thought DELETE Meant DELETE! September 2000 A very high level article aimed at the average computer user. Building a Super Kernel for Data Forensics [PDF] March 2002 DD and Computer Forensics August 2000 Examples of using DD within UNIX to Create Physical Backups DD and Computer Forensics - Deuce April 2001 Restoring Images via the DD Command Evidence Seizure Methodology for Computer Forensics September 2000 How to prepare your department for a forensics investigation, the importance of developing a methodology, as well as the steps to take when seizing evidence. Independent Validation & Verification of SMART for Linux [PDF] November 2002 Independent Validation & Verification of SMART for BeOS [PDF] February 2002 Next Generation Data Forensics & Linux [PDF] July 2002 Next Generation Data Forensics & Linux [PDF Presentation] PP Presentation August 2002 The Farmer's Boot CD [PDF] April 2006 Up in Smoke ... Live Forensics, Here and Now [PDF Presentation] June 2007 Using Linux for Incident Response & Data Forensics [PDF Presentation] March 2004 Using Linux for Today's Data Forensics [PDF Presentation] November 2003 Ruest, Jessica AOL Instant Messenger Trace Evidence [PDF] October 2006 Ruff, Nicholas & Matthieu Suiche (found via Andreas Schuster's blog) Enter Sandman [PDF Presentation] December 2007 Ruibin, Gong, Chan Kai Yun Tony & Mathias Gaertner Case-Relevance Information Investigation: Binding Computer Intelligence to the Current Computer Forensic Framework [PDF] May 2005 Ruiu, Dragos Hack and Counter-Hack - Active Forensics: Tracking that Intruder January 2001 Rusch, Jonathan J. Phishing and Federal Law Enforcement [PP Presentation] August 2004 Rust, James William Corporate management of computer forensics evidence [PDF] September 2006 (Registration required) Rutherford, Andrew, Reinhardt Botha & Martin Olivier Towards Hippocratic Log Files [PDF] November 2004 Rutkowska, Joanna Beyond The CPU: Cheating Hardware Based RAM Forensics January 2007 Beyond The CPU: Defeating Hardware Based RAM Acquisition (part I: AMD case) [PDF Presentation] June 2007 Rutkowski, Tony Cybercrime in New Network Ecosystem: Vulnerabilities and New Forensic Capabilities [PDF] March 2004 NGN Network Security Forensics and the Data Retention Directive [PDF Presentation] January 2006 Ryder, Karen Computer Forensics – We’ve Had an Incident, Who Do We Get to Investigate? [PDF] March 2002 Back to Top © 2006-2008 All rights reserved