HOME * THE * Digital Forensics Biblio What's New This Month! Blogs and Wikis Topic-Specific Resources The Other 'Good Stuff' Digital Forensic Books Links to Links About This Site

ARTICLES, PAPERS and PRESENTATIONS --- Authors beginning with 'W' Wadhwa, Kush Hiding data with Host Protected Area (HPA) in Linux September 2006 Volume Boot Sector Format of FAT May 2007 Wagholikar, Nikhil [Checkmate] Dare to delete my files! May 2007 Waghorn, Tom Testing the Date Maintenance of the File Allocation Table File System [PDF] 2003 Wagner, Lauren & Keith I. Daniels How to Capture a MySpace Page for Investigative Purposes [PDF] January 2008 Wagner, Mike The Coroners Toolkit: A Handy Suite of Utilities [PDF] December 2000 Walden, Ian Computer Crimes and Digital Investigations Chapter 2 - From Computer Abuse to Cybercrime [PDF] March 2007 Walter, Perry Digital Media Investigations [PDF Presentation] August 2005 Walters, AAron Augmenting Digital Investigations with Volatile Memory Analysis [PDF Presentation] August 2007 FATKit: A Framework for the Extraction and Analysis of Digital Forensic Data from Volatile System Memory [PDF] February 2006 FATKit: A Framework for the Extraction and Analysis of Digital Forensic Data from Volatile System Memory [PDF Presentation] August 2006 FATKit: Detecting Malicious Library Injection and Upping the “Anti” [PDF] July 2006 Walters, AAron & Nick L. Petroni, Jr. Volatools: Integrating Volatile Memory into the Digital Investigation Process [PDF] February 2007 Volatools: Integrating Volatile Memory into the Digital Investigation Process [PDF Presentation] February 2007 Wang, Jau-Hwang Computer Forensics – An Introduction [PP Presentation] December 2002 Wang, Wei & Thomas E. Daniels Building Evidence Graphs for Network Forensics Analysis [PDF] December 2005 Network Forensics Analysis with Evidence Graphs [PDF] August 2005 Wang, YingJian Forensics & Anti- Forensics [PDF Presentation] November 2007 Wang, Yun, James Cannady & James Rosenbluth Foundations of computer forensics: A technology for the fight against computer crime [PDF] April 2005 Warfield, Michael H. Forensics and Linux [HTML Presentation] July 2003 Warner, Gary Operation CyberSweep [PP Presentation] January 2004 (from archive.org) Warren, Ken Key Registry Locations [PDF] January 2005 Washington Computer Incident Response Center (WACIRC) WACIRC - Law Enforcement Guidelines for Reporting and Responding to Computer Crimes [PDF] 2003 Washington, Ryan Forensics for Managers [PDF Presentation] June 2007 Watson, David Handhelds give up secrets Discusses Zert, a tool which allows you to image mobile phones and PDAs, produced by the Netherlands Forensic Institute (http://www.forensischinstituut.nl/) and available only to law enforcement. Hidden Data [PDF Presentation] April 2005 Weasel & Simple Nomad Plausible Deniability Toolkit [PDF Presentation] August 2006 Webb, Stephen B. & J. Philip Craiger Defensive Battle Stations In Network-Centric Warfare: Rapid-Response Cyber Forensics [PP Presentation] October 2003 Webber, Michael Law enforcement uses high-tech tools to spot Internet crime (Page 1) [Word Document] July 2002 Seizing Computers - Important Considerations (Page 7) [Word Document] April 2000 Submitting Computers for Forensic Examination (Page 10) [Word Document] June 2000 Weber, Dominik BitLocker - Full Volume Encryption in Vista Forensic Considerations [Zipped PP Presentation] May 2007 Forensic impact of NTFS Object Identifiers [Zipped PP Presentation] May 2007 NTFS Initialized Size [Zipped PP Presentation] May 2007 NTFS Record Attribute ID - A preliminary look into an often overlooked forensic clue [Zipped PP Presentation] May 2007 Wee, Cheong Kai Analysis of hidden data in NTFS file system [PDF] March 2006 Wee, Cheong Kai & Lih Wern Wong Forensic Image Analysis of Familiar-based iPAQ July 2006 Weeks, Calvin Digital Forensics at a University [PDF Presentation] October 2005 Introduction to Cyber Forensics: Forensics Incident Response [PDF Presentation] Weeks, Calvin & Sean Ensz Cyber Forensics: Find Out What You Are Missing [PP Presentation] February 2005 Effective Incident Response Teams: Two Case Studies [PP Presentation] April 2005 Weeraman, Anuradha Data Recovery and Forensics (using TASK - The @Stake Sleuth Kit) September 2002 (from archive.org) Wei, Ren A Framework of Distributed Agent-based Network Forensics System [PDF Presentation] August 2004 Weil, Michael C. Dynamic Time & Date Stamp Analysis [PDF] June 2002 Weilbacher, Nathan Evidentiary Value of Link Files March 2006 Weingarten, Michael, & Adam Weingarten Email Tampering - This Time, The Good Guys Won [PDF] January 2002 Weise, Joel & Brad Powell Performing a Forensic Investigation [PDF] March 2004 Using Computer Forensics When Investigating System Attacks [PDF] April 2005 Weisenbach, Joe All Optical Discs are NOT Created equal [PDF Presentation] October 2007 Weiss, Aaron PDAs and Forensic Science [PP Presentation] Spring 2002 Welch, Mark ENCASE - A forensic computing utility that does it all (from archive.org) Welch, Thomas Computer Crime Investigation and Computer Forensics [PDF] Summer 1997 Wen, Bing CSI: Forensics for Service Provider Networks [PDF Presentation] February 2006 West Virginia University Forensic Science Initiative Technical Working Group for Education and Training in Digital Forensics [PDF] August 2007 WetStone Technologies Malware Detection - Known File Filtering [PDF] February 2004 Whitcomb, Carrie An Historical Perspective of Digital Evidence: A Forensic Scientist’s View [PDF] Spring 2002 White, Alex and Scott Charney Search and Seizure of Computers: Key Legal and Practical Issues White Collar Crime Fighter Sample Issue [PDF] April 2004 White, Doug Computer Forensics and First Response [PDF Presentation] April 2005 Current Activities in the NSRL [PDF Presentation] November 2006 Electronic Discovery [PDF Presentation] October 2005 Understanding Computer Forensics [PDF Presentation] April 2005 White, Douglas Digital Forensics Using Hashsets - National Software Reference Library [HTML Slideshow] June 2004 Update to "Using File Hashes to Reduce Forensic Analysis" July 2002 White, Douglas & Michael Ogata Identification of Known Files on Computer Systems [PDF Presentation] February 2005 White, Douglas & John Tebbutt Digital Forensics - Using Perl to Harvest Hash Sets [HTML Slideshow] June 2004 Whitman, Dr. Michael Academic Search and Seizure: An Update [PDF] October 2005 Computer Forensics Search & Seizure: Challenges in Academe [PDF] February 2005 Computer Forensics Search and Seizure: Challenges in the Academe - An Update [PDF Presentation] October 2005 The Technology of CSI and Computer Forensics [PP Presentation] 2003 Whitman, Michael E. & Herbert J. Mattord Computer Forensics in the Academic Environment [PDF Presentation] October 2004 Widdowson, Liam & John Ferlito Tales from the Abyss: UNIX File Recovery Widup, Suzanne Preparing for the In-House Digital Investigative Function [PDF] 2007 Wiebe, James Alternative Methods for Dealing with Whole Disk Encryption [PDF Presentation] October 2007 Alternative Methods for Dealing with Whole Disk Encryption [PDF Presentation] June 2007 Survey of Hardware Data Acquisition Tools [PDF Presentation] November 2006 Wiechman, John Collecting Evidence from Providers [PDF] August 2002 Wiechmann, Officer Fred J. Processing Flash Memory Media Wilding, Edward Internal Response Teams versus External Consultants - A Decision Matrix [PDF] February 2004 Operation Ore – The Tip of the Iceberg? [PDF] March 2003 (UK's largest ever police hunt against internet paedophiles) Willassen, Svein Yngvar Forensics and the GSM Mobile Telephone System [PDF] Spring 2003 Willassen, Svein Yngvar & Stig Frode Mjølsnes Digital Forensics Research [PDF] June 2005 Timestamps in Digital Forensics 2004 Willer, Lori Computer Forensics [PDF] May 2001 Williams, Brent CSI Georgia: Introduction to Computer Forensics [PP Presentation] November 2006 Williams, Ken Cyber Investigations [PP Presentation] October 2005 Williams, Victor Where is my Forensic Replicator (Lessons Learned in Developing an Information Technology Lab [PDF] June 2006 Williamson, B., Apeldoorn, P., Cheam, B. & McDonald, M. Forensic Analysis of the Contents of Nokia Mobile Phones [PDF] December 2006 Willingham, James E. IP Addresses and You [PP Presentation] Willis, Chuck Forensics with Linux 101 or How to do Forensics for Free [PDF Presentation] July 2003 Link to the Zipped Tools associated with presentation Willis, Chuck & Rohyt Belani Web Application Incident Response & Forensics: A Whole New Ball Game! [PDF Presentation] August 2006 Wilsdon, Tom & Dr. Jill Slay Digital Forensics: Exploring Validation, Verification & Certification [PDF] August 2005 Towards a validation framework for forensic tools in Australia [PDF] March 2005 Validation of Forensic Computing Software Utilizing Black Box Testing Techniques [PDF] December 2006 Wilson, Craig Hidden Date & Times - Forensic Analysis & Daylight Saving / Time Zone Pitfalls [PDF] (from archive.org) Volume Serial Numbers & Format Verification Date/Time [PDF] October 2003 Wilson, Stan & Jeff Tuley Forensic Investigation Case Studies and Results [PDF Outline] 2006 Wingate, James E. & Chad W. Davis An Analytical Approach to Steganalysis [PDF Presentation] November 2006 WinHex Homepage Computer Forensics, Investigations and Security WinHex as a professional data recovery and computer investigation tool Winterton, Eric Incident Response Fundamentals Class [PDF Presentation] 2000 Wittenburg, Kai Use of Digital Forensics in Incident Management [PDF Presentation] 2007 Witter, Franklin Legal Aspects of Collecting and Preserving Computer Forensic Evidence [PDF] April 2001 Wolfe, Henry B. An Introduction to Computer Forensics: Gathering Evidence in a Computing Environment [PDF] June 2001 Electronic Forensics: A Case for First Responders [PDF] June 2007 Encountering Encrypted Evidence (potential) [PDF] June 2002 Forensic evidence testimony — some thoughts [PDF] February 2004 Forensics and the Emerging Importance of Electronic Evidence Gathering [PDF] November 2001 Setting up an Electronic Evidence Forensics Laboratory [PDF] February 2004 Wolfinger, Brian T. Explanation of an IP Address Tracing [Word Document] Wong, Lih Wern Forensic Analysis of the Windows Registry April 2006 Wood, Bradley J. & Julie F. Bouchard Improving Government-Wide Emergency Response to Cyber Incidents [PDF] June 2001 Wood, Steven W. Examining and imaging data on running systems using LiveWire [PDF] May 2007 Woodward, Dr. Andrew BitLocker - the end of digital forensics? [PDF] December 2006 LIARS – Laptop Inspector and Recovery System [PDF] December 2006 The effectiveness of commercial erasure programs on BitTorrent activity [PDF] September 2006 Wootton, Cliff Analyzing Log Files November 1998 Wright, Jon High-Tech Holmes July 2001 Wright, Mal Investigating an Internal Case of Internet Abuse [PDF] September 2001 Wright, Paul Oracle Database Forensics using LogMiner [PDF] January 2005 Oracle Forensics in a Nutshell [PDF] March 2007 Using Oracle Forensics to determine vulnerability to Zero Day exploits [PDF] February 2007 Wright, Timothy A Method for Forensic Previews March 2005 Part 1: An Introduction to the Field Guide for Investigating Computer Crime April 2000 Part 2: Overview of a Methodology for the Application of Computer Forensics May 2000 Part 3: Search and Seizure Basics July 2000 Part 4: Search and Seizure Planning September 2000 Part 5: Search and Seizure Approach, Documentation, and Location November 2000 Part 6: Search and Seizure - Evidence Retrieval and Processing January 2001 Part 7: Information Discovery - Basics and Planning February 2001 Part 8: Information Discovery - Searching and Processing March 2001 Wrubel, James CERT's Virtual Training Environment: A New Model for Security and Compliance Training [PDF Presentation] June 2006 The CERT Virtual Training Environment: Information Assurance and Forensics Training Anywhere, Anytime [PDF Presentation] March 2006 Back to Top © 2006-2008 All rights reserved