HOME * THE * Digital Forensics Biblio What's New This Month! Blogs and Wikis Topic-Specific Resources The Other 'Good Stuff' Digital Forensic Books Links to Links About This Site

ARTICLES, PAPERS and PRESENTATIONS --- Authors beginning with 'S' Sahu, Prashant, Jayesh Powar, Ruchika Srivastava, & Neha Agarawal System Forensics Analysis [PDF] December 2006 Saita, Anne A Novel Approach to Computer Crime May 2001 In an effort to avoid censorship and protect patron privacy, public libraries may become unwitting accomplices to cybercrime. Antiforensics: The Looming Arms Race May 2003 Bucking Conventional Forensics Wisdom April 2002 Salsberry, Chris P2 Forensic Process: Distribution through multiple tools [PDF Presentation] June 2006 Salusky, William 5 Ways to FIRE up Your Incident Response and Forensic Environment - Registration Required [Audio, and Slides in PDF] May 2003 San Bernardino County Sheriff’s Department Hi-Tech Crime Detail Applying Advanced Technology to Digital Evidence [PDF] 2003 Sander, Stan Investigating One Incidence of Anomalous Network Traffic [PDF] June 2001 Sanderson Forensics Laptop Hard disk removal page (from archive.org) NTFS compression white paper (from archive.org) Sanguanboon, SA Victor Cyber Crime: Virtual Environemnts, Real Crime [PDF Presentation] August 2006 Sannedhi, Chakravarthy Incident Response Checklist Sans Institute Examine a Unix Box for Possible Compromise 1999 To identify a potential compromised Unix box is some what of an arcane art, though there are some simple things to look for. Sansurooah, Krishnun An approach in identifying and tracing back spoofed IP packets to their sources [PDF] December 2007 An overview and examination of digital PDA devices under forensics toolkits [PDF] December 2007 Taxonomy of computer forensics methodologies and procedures for digital evidence seizure [PDF] December 2006 Sarma, S.S. & Nishant Mohorikar Logs & Forensics [PDF Presentation] April 2004 Sarma, S. S. & Pankaj Sharma Log Analysis in Windows [PDF Presentation] April 2004 Sarmoria, Christian G. & Steve J. Chapin Monitoring Access to Shared Memory-Mapped Files [PDF] August 2005 Sassaman, Len Forensic Dead-Ends: Tracing Users Through Anonymous Remailers [PP Presentation] July 2002 Sassinsky, Jeffrey Beyond the Usual Suspects - Finding Data in Secret Spots November 2002 Caught in the 'Net' - How Law Enforcement Uses Computer Forensics in Modern Investigations March 2003 Cyberclues - Making the Case for Using Computer Evidence September 2002 Saudi, Madihah Mohd An Overview of Disk Imaging Tool in Computer Forensics [PDF] September 2001 Savage, Stefan, David Wetherall, Anna Karlin & Tom Anderson Network Support For IP Traceback [PP Presentation] April 2000 Practical Network Support For IP Traceback [PDF] April 2000 Practical Network Support For IP Traceback [PDF Presentation] October 2000 Savoldi, Antonio & Paolo Gubian Embedded Forensics: An Ongoing Research about SIM/USIM Cards [PDF Presentation] June 2007 SIM and USIM Filesystem: a Forensics Perspective [PDF] May 2007 Savoy, Jeffrey Forensic Overview [PP Presentation] April 2006 Forensic Overview [PP Presentation] July 2005 Spying 101 [PP Presentation] October 2007 Savoy, Kevin Inappropriate Use of UVA IT Resources [PDF Presentation] October 2006 Spying 101 (Computer Forensics) [PP Presentation] 2006 Sawyer, John Incident Response Tools - Security Triage and Treatment December 2006 Sawyer, Joshua J. Magnetic Data Recovery – The Hidden Threat [PDF] April 2006 Schafer, Eric Data Disposal - Gone for Good [PDF Presentation] 2006 Schaffer, Gregory P. The Role of Computer Forensics in the Investigation of Network Intrusion Activity [PDF Presentation] June 2002 (from archive.org) Schatz, Bradley BodySnatcher: Towards reliable volatile memory acquisition by software [PDF] August 2007 Digital evidence : representation and assurance [PDF] December 2007 Recent developments in volatile memory forensics [PDF] December 2007 Schatz, Bradley & Andrew Clark An open architecture for digital evidence integration [PDF] May 2006 Schatz, Bradley, George Mohay & Andrew Clark A correlation method for establishing provenance of timestamps in digital evidence [PDF] August 2006 Generalising Event Forensics Across Multiple Domains [PDF] 2004 Schiffman, Mike D. The Need for an 802.11b Toolkit [PP presentation] July 2002 Schmid, Patrick & Achim Roos RAID Recovery: The Data Knight Kroll Ontrack To The Rescue! February 2007 Saving Your Data After a Head Crash: An Inside Look at a Disk Recovery Service May 2005 Schmidt, Raemarie J. Computer Forensics - As part of a security incident response plan [PDF Presentation] June 2005 Schmidtknecht, Douglas Building FBI computer forensics capacity: one lab at a time [PDF] August 2004 Cyber Crime: Labs and Investigations [PDF Presentation] 2003 (from archive.org) RCFL National Program [Presentation in PDF] May 2003 (from archive.org) Schmitz, Peter & Antony Cooper Using Mobile Phone Data Records to Determine Criminal Activity Space [PDF Presentation] September 2007 Schmitz, Peter, Antony Cooper, Tom de Jong & Kim Rossmo Mapping Criminal Activity Space using Cellular (Mobile) Telephone Data [PDF Presentation] March 2007 Schneier, Bruce Hidden Text in Computer Documents August 2003 Schneier, Bruce & John Kelsey Secure Audit Logs to Support Computer Forensics [PDF or PS] 1999 Scholl, Matthew, Richard Kissel, Steven Skolochenko & Xing Li Guidelines for Media Sanitization [PDF] September 2006 Schperberg, Robert Cybercrime: Incident Response and Digital Forensics [Sample] Chapter 2: Business Drivers for Creating an Incident Response Process and Conducting Digital Forensics Investigations [PDF] July 2005 Schroader, Amber E-mail Forensics [PDF Presentation] October 2007 Handheld Forensics [PDF Presentation] November 2005 Mobile Forensics: Bridging the Gap between Cops and Examiners [PDF Presentation] November 2005 Contributor to Techno Security's Guide to Managing Risks: For It Managers, Auditors and Investigators Chapter 4 - Handheld Forensics [PDF] 2005 Schroeder, Amber & Tyler Cohen CSI Crime Scene Investigation - Did Jack Do It? [PDF Presentation] August 2006 Schroder, Carla Sawing Linux Logs with Simple Tools September 2004 Schroeder, Steve Preparing to be an Expert Witness [PDF Presentation] November 2005 Schultz, John S. Offline Forensic Analysis Of Microsoft Windows XP Physical Memory [Thesis for Purchase] September 2006 Schultze, Eric NT Information Gathering Commands Schulz, Rolf Technical Evolution of Cybercrime [PDF Presentation] October 2006 Schuster, Andreas In-Place Carving December 2006 Introducing the Microsoft Vista event log file format [PDF] August 2007 LibCarvPath and CarvFS December 2006 Memory Analysis Cheat Sheet for Microsoft Windows XP SP2 [PDF] September 2007 Co-author Pär Österberg Pool Allocations as an Information Source in Windows Memory Forensics [PDF Presentation] October 2006 Searching for processes and threads in Microsoft Windows memory dumps [PDF] August 2006 Slides [PDF] Windows Memory Analysis [PDF Presentation] September 2007 Schwartau, Winn Basics of Computer Forensics [PP Presentation] November 2003 Schwartz, Mathew Best Practices: Collecting Computer Forensic Evidence January 2004 Shell Game June 2002 Unleash the Cyberhounds! April 2002 Schwarz, Joel Michael Cyber Security - the Laws that Protect your Systems and Govern Incident Response [PP Presentation] April 2003 Fighting Cyber Crime in a Post-9-1-1 World: Yesterday, Today and Tomorrow [PP Presentation] April 2005 How Effective Cooperation with Law Enforcement Authorities Can Promote Computer Security [PP Presentation] March 2004 (from archive.org) Schwarz, Thomas Teaching Ethics and Computer Forensics: The Markkula Center for Applied Ethics Approach [PDF] 2005 Schweitzer, Douglas Incident Response: Computer Forensics Toolkit Chapter 1: Computer Forensics and Incident Response Essentials [PDF] Schwittay, Bastian Towards Automating Analysis in Computer Forensics [PDF] August 2006 Scogin, Allison H. Disabling a Wireless Network via Denial of Service [for Forensics] [PDF] April 2007 SCORE Interfacing with Law Enforcement FAQ January 2004 Scott, Cory Windows NT/2000 Event Log Management and Intrusion Detection [PP Presentation] Scott, Mark Independent Review of Common Computer Forensics Imaging Tools [PDF] August 2003 (from archive.org) SEARCH Creating a Forensic Computer System: Basic Hardware and Software Specifications [PDF] August 2006 Creating A Forensic Computer System: Basic Hardware and Software Specifications [PDF] Updated July 2004 Identifying the Owner of a Website [PP Presentation] 2000 ISP List [Formerly available at ForensicWeb] Law Enforcement Investigative Use of Cellebrite’s UME-36Pro [PDF] April 2007 Viewing Email Headers [PDF] August 2005 Seberry, Jennifer What is Computer Forensics? [PP Presentation] September 2002 Secure Science Corporation Banking Scam Revealed November 2003 Seddon, James Forensic UNIX Initial Response Script and CDROM – Collect the evidence that will be lost by disconnection or shutdown [PDF] 2003 Sedory, Daniel B. How To Permanently Erase Data from a Hard Disk 2005 The Windows XP Startup Disk [An Example in Basic Forensics / Data Recovery] 2004 Segal, Ory Web Application Forensics: The Uncharted Territory [PDF] 2002 Seiferta, Christian, Ramon Steensona, Ian Welcha, Peter Komisarczuka, & Barbara Endicott-Popovsky Capture – A behavioral analysis tool for applications and documents [PDF] August 2007 Seifreid, Kurt Electronic Forensics May 2000 Seitz, Nicolai "Transborder Search" A new perspective in law enforcement? [PDF] March 2004 Sencar, Husrev T. & Nasir Memon Overview of State-of-the-art in Digital Image Forensics [PDF] 2007 Seufert, Stefan & Sebastian Wolfgarten Forensic Computing, Assignment #3, Sample exam [PDF] April 2006 Forensics, Lab Report #4: Internet Explorer and the Recycle bin [PDF] March 2006 Forensic Computing, Lab Report #6: Live Windows Lab [PDF] April 2006 Hidden data in popular office file formats [PDF] April 2006 Alternate Link Seward, Jack Forensic Accounting - the recorded electronic data found on Computer Hard Disk Drives, PDAs and numerous other Digital Devices September 2004 Good to the Last Byte [PDF - Local copy] March/April 2004 The Debtor’s Digital Reckonings [PDF] Fall 2003 Seward, Jack & Daniel A. Austin E-Sleuthing and the Art of Electronic Data Retrieval - Uncovering Hidden Assets in the Digital Age: Part I [PDF - Local copy] February 2004 E-Sleuthing and the Art of Electronic Data Retrieval - Uncovering Hidden Assets in the Digital Age: Part II [PDF - Local copy] March 2004 E-Sleuthing and the Art of Electronic Data Retrieval - Uncovering Hidden Assets in the Digital Age: Part III [PDF - Local copy] April 2004 Shanmugasundaram, Kulesh & Nasir Memon Automated Reassembly of Document Fragments via Context Based Statistical Models [PDF] December 2003 Shanmugasundaram, Kulesh, Nasir Memon, Anubhav Savant, & Herve Bronnimann ForNet: A Distributed Forensics Network 2003 Shannon, Matthew M. Forensic Relative Strength Scoring: ASCII and Entropy Scoring [PDF] Spring 2004 Linux Forensics Weekly March - April 2004 Week 1 - Linux Forensics of CDR Media Week 2 - Accessing and Analyzing the Windows Registry Week 3 - Linux Anti-Virus Tools and Techniques for Forensic Investigation Week 4 - Using Linux VMware Workstation and Raw Disk Images to view the Suspect Workstation Review of Digital Intelligence Firefly and Ultrablock products Shap, Daniel Search and Seizure of Canadian Computer Environments 1993 Sharpe, Alan Can digital detectives undo paper shredding? [PDF] Shaver, David How to Image RAIDS [PP Presentation] Shavers, Brett Accessing Forensic Images [PP Presentation] May 2007 Internet Artifacts [PDF Presentation] July 2006 Peer to Peer Network Forensic Issues [PDF Presentation] 2006 Restoring Suspect Physical and Compressed Images with VMWare [PDF Presentation] September 2006 VMWare as a forensic tool May 2006 PDF version X-Ways Replica [PDF Presentation] December 2005 Shaw, Tony Handling evidence after an 'incident' [PDF Presentation] October 2004 Sheldon, Andrew Forensics and Data Recovery [PDF Presentation] September 2005 Forensic Auditing: The Role of Computer Forensics in the Corporate Toolbox January 1999 Forensics & Data Recovery [PDF Presntation] Fall 2005 IT Forensic Investigation [PP Presentation] April 2003 The Future of Forensic Computing [PDF] February 2002 (from archive.org) http://www.evidencetalks.com/PDFs/foresight.pdf Shenk, Maury D. & Melanie Schneck Should a Corporation Report a Breach to Law Enforcement? [PDF] Fall 2001 While reporting an incident enables law enforcement to investigate, it also may subject the corporate victim to adverse publicity, regulatory scrutiny, and business losses. Sherman, Mark Cyber Crime and Cyber Terrorism [PDF] April 2002 Sherman, Shayne A digital forensic practitioner's guide to giving evidence in a court of law [PDF] December 2006 Shinder, Debra Littleton Do You Leave Sensitive Data Lying Around? November 2004 Scene of the Cybercrime: Assisting Law Enforcement in Tracking Down and Prosecuting Cybercriminals [PP Presentation] July 2001 Scene of the Cybercrime: Computer Forensics Handbook Chapter 7: Understanding Cybercrime Prevention [PDF] Testifying in a Computer Crimes Case April 2005 Shipley, Greg Security Information Management Tools: NetForensics Leads a Weary Fleet April 2002 Shipley, Todd Collecting Legally Defensible Online Evidence [PDF] December 2007 Cybercrime: Supporting Cyber Sleuths July 2001 Shipley, Todd G. & Henry R. Reeve Collecting Evidence from a Running Computer: A Technical and Legal Primer for the Justice Community [PDF] August 2006 Shirk, Eric The Dangers of Do-It-Yourself Computer Forensics November 2007 Shirley, Steven Digital Forensics on an Industrial Scale [PDF Presentation] April 2007 Shirnai, Bram Anti Forensics [PP Presentation] June 2004 Linux Forensics [PP Presentation] June 2004 Shirobokov, Andrei 3D Data Recovery - A Professional Approach to Data Recovery [PDF Presentation] November 2006 3D Data Recovery - a professional approach to data recovery [PDF Presentation] June 2007 Shpantzer, Gal & Ted Ipsen Law Enforcement Challenges in Digital Forensics [PDF Presentation] 2002 Siebert, Bill The Top EnCase Tech Support Questions & What’s new at Guidance Software? [PP Presentation] May 2002 Siefert, Michael, Rodney Forbes, Charles Green, Leonard Popyack, & Thomas Blake Stego Intrusion Detection System [PDF] August 2004 Powerpoint Briefing Siles, Raul Wireless Forensics: Tapping the Air - Part One January 2007 Wireless Forensics: Tapping the Air - Part Two January 2007 Simon, Matthew & Jill Slay Voice over IP: Forensic Computing Implications [PDF] December 2006 Simons, Erica B. Forensic Computer Investigation Brings Notorious Serial Killer BTK to Justice [PDF] November 2005 Singleton, Tommie W. What Every IT Auditor Should Know About Cyberforensics 2006 Sira, Rommel Network Forensics Analysis Tools: An Overview of an Emerging Technology [PDF] January 2003 Siracusa, John Metadata, The Mac, and You Sisk, Robert Design Your Network to Aid Forensic Investigation [PDF Presentation] June 2006 Sitaraman, Sriranjani Algorithms to Enable Forensic Analysis of Computer and Network Intrusions [PDF] Spring 2006 Sitaraman, Sriranjani, Srinivasan Krishnamurthy & S. Venkatesan Byteprints: A Tool to Gather Digital Evidence [PDF] February 2005 Sitaraman, Sriranjani, & S. Venkatesan Forensic Analysis of File System Intrusions using Improved Backtracking [PDF] February 2005 Low-Intrusive Consistent Disk Checkpointing: A Tool for Digital Forensics [PDF] February 2005 Slade, Robert M. Software Forensics Chapter 2: The Players - Hackers, Crackers, Phreaks, and Other Doodz [PDF] 2004 Slagel, Adam Sharing Network Logs for Computer Forensics [PP Presentation] September 2005 Slagell, Adam J., Yifan Li & Katherine Luo Sharing Network Logs for Computer Forensics: A New Tool for the Anonymization of NetFlow Records [PDF] 2005 Slashdot Bootable Linux Demo Distro - Knoppix Thread started August 2002 Data Mining Used Hard Drives - Thread started January 2003 Guidelines For Data Gathering And Forensics? - Thread started July 2001 Linux and Forensic Discovery - Thread started January 2003 Salon On Computer Forensics - Thread started April 2002 What is the Scope of Computer Forensics? December 2005 Slay, Jill, Tim Fisher, Damien Lane & Ykang Huang CATz Forensic Tool [PP Presentation] 2006 Slay, Jill & Andrew Przibilla iPod Forensics: Forensically Sound Examination of an Apple iPod [PDF] January 2007 Smith, David C. Cool stuff learned from the Department of Defense Cyber Crime Digital Forensic Challange (2006) [PDF Presentation] August 2007 Smith, G. Stevenson Collection and Control of Electronic Evidence [PDF] 2000 Smith, Gregory Starter Kit - Mobile Telephone Evidence Part 1 [PDF Presentation] March 2005 Starter Kit - Mobile Telephone Evidence Part 2 [PDF Presentation] March 2005 Smith, Jay, Klayton Moore & Andy Bair Digital Forensics File Carving Advances [PDF Presentation] October 2006 Smith, John C. Investigating and Prosecuting Network Intrusions 1996 Smith, Russell G. Criminal forfeiture and restriction-of-use orders in sentencing high tech offenders October 2004 Impediments to the successful investigation of transnational high tech crime October 2004 Smith, Shane Secure Data Deletion and Recovering Data from Multi-Pass Algorithms [PDF] 2005 Smith, Sharon Evidence Discovery in a Digital World [PP Presentation] February 2004 (from archive.org) Snyder, Jeff Sex Offender Computer Examinations [PDF Presentation] June 2005 Snyder, Robin M. An after-the-fact computer forensics investigation with ethical consequences: experience and recommendations [PDF] September 2005 (Registration required) Sobey, Charles H. Recovering Unrecoverable Data [PDF] April 2004 Sobieraj, Sean & Richard Mislan Mobile Phones: Digital Photo Metadata [PDF Poster] 2007 SodaPopinsky Microsoft Word MetaData Forensics Tutorial March 2004 Söderblom, Fredrik How to catch a DDoS kiddie [PDF Presentataion] October 2007 Solomon, Jason Michael Computer Forensics: The Persistence of Data in Physical Memory [Thesis] [PDF] October 2006 Solomon, Jason & Erik Lattimore Computer Forensics [PDF] March 2007 Solomon, Michael G., Diane Barrett & Neil Broom Computer Forensics JumpStart (Sample Chapter) Chapter 1: The Need for Computer Forensics [PDF] November 2004 Sommer, Peter Computer Forensics: an introduction 1997 Digital Evidence: Emerging Problems in Forensic Computing [PP Presentation] May 2002 Digital Evidence: Emerging Problems in Forensic Computing [PDF Presentation] Digital Footprints: Assessing Computer Evidence [PDF] 2000 Directors and Corporate Advisors’ Guide to Digital Investigations and Evidence [PDF] September 2005 Downloads, Logs and Captures: Evidence from Cyberspace [PDF] 2000 Emerging Problems in Forensic Computing [PP Presentation] May 2004 Identity Management Systems: the forensic dimension [PDF Presentation] June 2007 Innovation and Legal Acceptability in Computer Forensics [Zipped PDF] June 2000 Introducing Digital Forensics [PP Presentation] May 2004 Intrusion Detection Systems as Evidence [PDF] December 2000 The Application of Intrusion Detection Systems in a Forensic Environment (Extended Abstract) [PDF] 2000 Sommer, Peter [for the IAAC] Directors & Corporate Advisors' Guide to Digital Investigations and Evidence [PDF] September 2005 Sonntag, Dr. Michael Computer Forensics Course [PDF Presentation] 2007-2008 Slides in English Sood, Aditya Cookie Dethroning.::DEMYSTIFIED Part A [PDF] October 2005 Cookie Dethroning.::DEMYSTIFIED Part B [PDF] October 2005 Sorenson, Holt Incident Response Tools For Unix, Part One: System Tools March 2003 Incident Response Tools For Unix, Part Two: File-System Tools October 2003 SADFF (Southern African Digital Forensic Forum) Forensic Newsletters [PDFs] 2006 South Carolina Department of Archives and History Digital Media Storage -- Facilities and Procedures [PDF] March 2005 Spenneberg, Ralf Autopsy and Sleuthkit, the Digital Forensics Toolkit - The Tracker Dog’s Guide [PDF] November 2003 Intrusion Detection for Linux Server Sample Chapter 16: Analyzing a compromised computer in German Also available: Download forensic-rescue-cd-2.0.iso Sleuthkit, the Digital Forensic Toolkit [PDF] October 2003 Spitzner, Lance Automating Forensics (Honeynets and Digital Forensics) [PP Presentation] August 2004 Spognardi, Angelo, Alessandro Lucarelli, Roberto Di Pietro A methodology for P2P file-sharing traffic detection [PDF] July 2005 A methodology for P2P file-sharing traffic detection [PDF Presentation] July 2005 Sremack, Joseph C. Formalizing Computer Forensic Analysis: A Proof-Based Methodology [PDF] 2004 Sremack, Joseph & Alexandre V. Antonov Taxonomy of Anti-Computer Forensics Threats [PDF Presentation] September 2007 Srihari, Sargur N., Chen Huang, Harish Srinivasan, & Vivek Shah Biometric and Forensic Aspects of Digital Document Processing [PDF] December 2006 St Sauver, Joe Digging Into Unlawful Email Messages [PP Presentation] September 2005 Stacy, Hassel Jr. Computer Forensics For Law Enforcement [PDF] June 2006 Staggs, Dr. M.J. Wireless Network Security and Forensic Analysis [PP Presentation] October 2004 Stahl, Bernd Carsten Is Forensic Computing a Profession? Revisiting an Old Debate in a New Field [PDF] 2006 Stahl, Bernd Carsten, Carroll-Myer, Moira & Norris, Peter Forensic Computing: the Problem of Developing a Multidisciplinary University Course [PDF] 2006 Stahlberg, Patrick, Gerome Miklau, & Brian Neil Levine Threats to Privacy in the Forensic Analysis of Database Systems [PDF] 2007 Stallard, Tye Automated Analysis for Digital Forensic Science [PDF] 2002 Automated Analysis for Computer Forensics [PDF Presentation] Data Forensics: "Analyzing the Tracks of an Intruder" or "Analyzing Administrative Responses to Log Anomolies" [PDF Presentation] Stallard, Tye and Karl Levitt Automated Analysis for Digital Forensic Science: Semantic Integrity Checking [PDF] December 2003 Stanczewski, Yann Computer Forensics 101 [PDF Presentation] 1999 Computer Forensics 101 [PDF Presentation] 2000 Computer Forensics 101 [PDF Presentation] 2001 Computer Forensics 101 [PDF Presentation] 2002 Computer Forensics: How to be a Cybercrime Detective [PDF Presentation] 2003 Stanley, Aaron & Evan McGoff Choosing Hardware for a Computer Forensics Lab [PDF] March 2006 State of Maryland Standard Operation Procedures for Electronic Evidence Handling [PDF] November 2002 Steel, Chad Windows Forensics [PDF] May 2006 Sample Chapter from 'Windows Forensics: The Field Guide for Corporate Computer Investigations' Steichen, Pascal Computer Forensics [PDF] January 2005 Stenhouse, David P. Computer-Based Discovery and Risk Control [PDF Presentation] May 2004 Stephenson, Peter A Brief Intro to End-to-End Digital Investigation [PDF Presentation] July 2003 A Comprehensive Approach to Digital Incident Investigation [PDF] 2003 A New Approaches to Complex Digital Investigations [PP Presentation] December 2004 Application Of Formal Methods To Root Cause Analysis of Digital Incidents [PDF] Summer 2004 Conducting an Incident Post Mortem [PP Presentation] November 2003 Conducting Incident Post Mortems [PDF] April 2003 Digital Forensics - A Primer [PP Presentation] January 2005 DIPL: The Digital Investigation Process Language [PP Presentation] November 2003 Ensuring the Reliability and Admissibility of Digital Evidence [PP Presentation] November 2004 FARES: Forensic Analysis of Risks in Enterprise Systems [PP Presentation] June 2004 Forensic Analysis of Risks in Enterprise Systems [PDF] 2004 Forensic tools 2007 April 2007 Intro to End-to-End Digital Investigation [PP Presentation] May 2005 Intrusion Detection as a Network Forensic Tool [Word Document] (Abstract) Investigating Internet Security Incidents: A Brief Introduction to Cyber Forensic Analysis [PP Presentation] 1999 Modeling of Post-Incident Root Cause Analysis [PDF] Fall 2003 Security Incident Investigation [PDF Presentation] November 2000 Structured Investigation of Digital Incidents in Complex Computing Environments [PDF] 2003 The DFRWS Framework Classes [PDF] 2003 Steuart, Christopher K. The Computer Forensics Expert Witness - CV, Preparation, Testimony [PDF Presentation] 2004 Stevens, Malcolm W. Unification of relative time frames for digital forensics [PDF] 2004 Volume 1 Issue 3 - Registration required Stevens, Scott Data Reduction For Streamlining E-Discovery [PDF Presentation] July 2004 Stewart, Barrie Forensic Implications of Windows Vista [PDF] September 2007 Stillman, Scott, Jenna K. Perrin & Mike L. Younger Using Digital Forensic Technology in Your Investigations [PDF Presentation] August 2006 Stolfo, Sal Behavior Profiling of Email [PP Presentation] 2003 Stone, Kimberly & Richard Keightley Can Computer Investigations Survive Windows XP? [PDF] December 2001 Stone, Randy Computer Forensics and the Arrest of BTK [PDF Presentation] November 2005 Stone-Kaplan, Kimberly & Michele Roter Date, Time, and Time Zone Examination [PDF] April 2003 Stover, Sam & Matt Dickerson Using Memory Dumps in Digital Forensics [PDF] December 2005 Strubinger, Ray The Foremost Open Source Forensic Tool September 2003 Strydom, Louis Computer Evidence [PDF] December 2001 Suen, Anna Computer Forensics [PDF] April 2002 Database Forensics [PDF] April 2002 Sun, Yeali S. Network Security and Forensics Research [PDF Presentation] November 2006 Sussman, Vic Policing Cyberspace [PDF] January 1995 Sussmann, Michael A. The Critical Challenges from International High-Tech and Computer-Related Crime [PDF] Sutcliffe, John How Windows stores information about the User October 2000 Sutherland, Iain Challenges in Teaching Computer Forensics [PP Presentation] November 2006 Svensson, Anders Computer Forensics Applied to Windows NTFS Computers [PDF] April 2005 SWGDE-SWGIT Best Practices for Computer Forensics [PDF] July 2006 Data Archiving [PDF] April 2006 Data Evidence Findings [PDF] April 2006 Data Integrity Within Computer Forensics [PDF] April 2006 Digital Evidence: Standards and Principles April 2000 Guidelines and Recommendations for Training in Digital & Multimedia Evidence [PDF] July 2004 Proficiency Test Program Guidelines [PDF] July 2004 Recommended Guidelines for Developing Standard Operating Procedures [for Digital Forensic Examinations] [PDF] July 2004 Recommended Guidelines for Validation Testing [PDF] July 2004 SWGDE and SWGIT Glossary of Terms [PDF] (Posted for review) April 2005 Swaminathan, Ashwin, Min Wu & K. J. Ray Liu Intrinsic Fingerprints for Image Authentication and Steganalysis [PDF] 2007 Intrinsic Fingerprints for Image Authentication and Steganalysis [PDF Presentation] 2007 Symantec Client-side Exploits: Forensic Analysis of a Compromised Laptop [PDF] June 2004 Symmetricom Time: the Currency of Computer Crime [PDF] 2003 Szewczyk, Patryk & Craig Valli Personal Firewalls - Testing Robustness [PDF] December 2006 Szewczyk, Patryk ADSL Router Forensics Part 1: An introduction to a new source of electronic evidence [PDF] December 2007 An examination of the Asus WL-HDD 2.5 as a Nepenthes malware collector [PDF] December 2007 Back to Top © 2006-2008 All rights reserved