First page Back Continue Last page Summary Graphics

ADDITIONAL RESOURCES

RCMP Article on the Forensic Process. http://www.rcmp-grc.gc.ca/tsb/pubs/bulletins/bull41_3.htm Lance Spitzner’s Page: Forensic Analysis, Building Honeypots http://www.enteract.com/~lspitz/pubs.html Fish.com Security’s Forensic Page: The Coroner’s Toolkit (Unix), Computer Forensic Class Handouts. http://www.fish.com/forensics/
The Forensic Toolkit (NT). http://www.ntobjectives.com/forensic.htm
Cryptcat. http://www.farm9.com/Free_Tools/Cryptcat Long Play Video Recorders. http://www.pimall.com/nais/vrec.html
FBI Handbook of Forensic Services. http://www.fbi.gov/programs/lab/handbook/intro.htm
Solaris Fingerprint Database for cryptographic comparison of system binaries. http://sunsolve.sun.com/pub-cgi/fileFingerprints.pl
Inspecting Your Solaris System and Network Logs for Evidence of Intrusion.
http://www.cert.org/security-improvement/implementations/i003.01.htmlONCTek List of possible Trojan/Backdoor Activity http://www.onctek.com/trojanports.html
Sixteen Tips for Testifying in Court from the “PI Mall” http://www.pimall.com/nais/n.testify.html

Notes:

Fish.com Security has some new stuff up
- the forensics page is relatively new
- TCT has been around but this is the first official link to it
- New stuff including a DDJ column
- Other non-forensic but good technical security stuff on the site

TESTIMONY: We’re no experts, URL is simple guidance, seek advise from the council you are representing

ADDITIONAL RESOURCES

The Forensic Toolkit (NT). http://www.ntobjectives.com/forensic.htm

Cryptcat. http://www.farm9.com/Free_Tools/Cryptcat Long Play Video Recorders. http://www.pimall.com/nais/vrec.html

FBI Handbook of Forensic Services. http://www.fbi.gov/programs/lab/handbook/intro.htm

Solaris Fingerprint Database for cryptographic comparison of system binaries. http://sunsolve.sun.com/pub-cgi/fileFingerprints.pl

Inspecting Your Solaris System and Network Logs for Evidence of Intrusion.

http://www.cert.org/security-improvement/implementations/i003.01.htmlONCTek List of possible Trojan/Backdoor Activity http://www.onctek.com/trojanports.html

Sixteen Tips for Testifying in Court from the “PI Mall” http://www.pimall.com/nais/n.testify.html

Notes: