Home

Events

Publications

Computer Forensics Workshop

Books And Journals

Hardware

Software

Interesting Links

Online Materials

Introduction, Popular Articles

• Computer Forensics definiton from BambooWeb Dictionary, online library which contains thousands of articles . Also definitions of encryption, cryptanalysis, steganography, steganalysis, etc.
• Forensic Software Maker Gets Tough on Computer Crime, popular article from tom's hardware guide.
• Computer forensics tips , an introductory article from TechRepublic.

Computer Forensics Sites

• Linux-Forensics.com is the site devoted to Computer Forensics using the Linux Operating system. It is a collection of links to resources in order to help anyone involved in the field of data forensics.
• CRAZYTRAIN.COM -- houses information pertaining to the Information security arena as well as the data forensics arena. The site maintained by Thomas Rude.
• Computer Forensics, Cybercrime and Steganography Resources. One of the best sites dedicated to Coputer Forensics and Steganography: large, comprehensive and well maintained. Large repository of documents, free for download. Highly recommended.
• Cybercime, a site maintained by a former police officer, currently computer security consultant, USA.
• The Honeynet Project is a non-profit (501c3) research organization of security professionals dedicated to information security. We have no products, services or employees, our research is done on a volunteer basis. It is our goal to learn the tools, tactics, and motives of the blackhat community and share these lessons learned. It is hoped that our research will benefit both its members and the security community. Founded in October, 1999, all of our work is OpenSource and shared with the security community. USA.
• The Resource Center of Technology Pathways has list of useful materials and links: Technical White Papers, Webinars, Presentations, Forensics Reference, General Security Reference, Computer Crime, and Forensics Links.
• E-Evidence Information and Resource site. A compilation of links to material related to all aspects of Digital Forensics and Electronic Evidence.

Australasian Law Enforcement Agencies and Legal Sites

• Australasian Centre for Policing Research (ACPR).
• Australian High tech Crime Centre (AHTCC).
• Australian Government Department of Defence, Defence Signals Directorate (DSD)
• Collecting Forensic Evidence of an intrusion for police prosecution, a paper written by the Australian Federal Police on what to do if you suspect you've been hacked, and you want to involve the police and prosecute the person involved. Courtesy of The University of Sydney.
• Australasian Legal Information Institute, A joint facility of UTS and UNSW Faculties of Law, large data base of legal materials, for example:
  • 77014 Law and Computers links to: Computer Crime Materials, Law Journal Article References, Australian and Overseas Cases, Australian and Overseas Legislation, Australian and Overseas Explanatory Memoranda, Australian and Overseas Reports

International Law Enforcement Agencies and Legal Sites (a small selection)

• Computer Crime Laws by State (USA)

Government Agencies (various countries)

• Searching and Seizing Computers and Obtaining Electronic Evidence in Criminal Investigations. Includes discussion outline, bibliography, and recent cases.Source: Computer Crime and Intellectual Property Section, Criminal Division, United States Department of Justice July 2002.
• Cybercrime Documents: Press releases, speeches, Congressional testimony, letters, reports, manuals, and court filings related to computers and cyberspace, from: Computer Crime and Intellectual Property Section (CCIPS), U.S. Department of Justice.
• Computer Crime and Intellectual Property Section (CCIPS), U.S. Department of Justice.
• The Computer Analysis and Response Team, FBI (USA)
• How the FBI Investigates Computer Crime
• Department of Defense Cyber Crime Center (USA)

International Organisations

• IOCE International Organization on Computer Evidence
• Scientific Working Group for Digital Evidence (SWGDE) - formed by the Federal Crime Laboratory Directors group to establish and promulgate accepted forensic guidelines and definitions for the handling of digital evidence.
• HTCIA International (High Technology Crime Investigation Association).
• Interpol, Information Technology Crime page.

Education And Research

• The Center for Education and Research in Information Assurance and Security (CERIAS) is currently viewed as one of the world's leading centers for research and education in areas of information security that are crucial to the protection of critical computing and communication infrastructure. CERIAS is unique among such national centers in its multidisciplinary approach to the problems, ranging from purely technical issues (e.g., intrusion detection, network security, etc) to ethical, legal, educational, communicational, linguistic, and economic issues, and the subtle interactions and dependencies among them.
• The Forensic Computing Institute is a “virtual” collaboration of forensic computing professionals drawn from academia and the professions
• The Computer Crime Research Center (CCRC) is an independent organization concerned with criminology, embracing scholarly, scientific, and professional knowledge concerning the etiology, prevention, control and treatment of cyber crime, cyber terrorism and other issues of computer crimes. The CCRC is an international and a non-profit organization composed of professionals dedicated to education in the field of computer crimes and cyber terrorism prevention and investigation. CCRC members represent Ukrainian and International researchers.

Computer Societies (a small selection)

• IEEE Computer Society the world’s oldest and largest membership association of computer professionals.
• The Australian Computer Society (ACS).

Standards, Proposed Standards, Checklists

• RFC3227, Guidelines for Evidence Collection and Archiving, February 2002. RFC Status: Best Current Practice.
• Proposed Standards for the Exchange of Digital Evidence, Source: Scientific Working Group on Digital Evidence (SWGDE), USA.
• CERT® Coordination Center, federally funded research and development center operated by Carnegie Mellon University: Intruder Detection Checklist.

Crime Scene Investigation Sites

• Crime Scene Investigation, interesting, large site, USA

Commercial Computer Forensic Companies (a small selection)

• TeCrime International, Inc.specialises in all aspects of High Technology Crime, Computer Forensics and Digital Evidence. International services provided for both the prosecution and the defense. Large collection of interesting links.
• Burgess Forensics offers Computer Forensic, Electronic Discovery and Expert Witness & Testimony (U.S.A.). Collection of articles, links and case studies.
• FDR Forensic Data Recovery, a privately owned Canadian company specializing in computer forensics investigation, consultation, and training. Offices are located in Victoria British Columbia (headquarters), London Ontario and Sydney Australia.

Various Interesting Resources

Selection of interestinag or unusual materials: software tools, articles, etc. Difficult to classify under "computer forensics", but potentially useful.

• FILExt is a detailed database of file extensions and programs that use them.
• Offline NT Password & Registry Editor, Bootdisk / CDx. Boot a Windows PC with this bootdick which has minimal Linux installation and a tool to change any system password without knowing the original password. Very powerful and dangerous tool.
• How can I gain access to a Windows 2000/XP/NT computer if I forgot the administrator's password? How can I reset the administrator's password if I forgot it? Comprehensive article, includes description and links to many tools.