Computer Forensics

Information and Whitepapers

Download or Read On-Line

SANS Institute GIAC Practical Papers by Mark E. Donaldson

Computer Forensics - Disk Analysis and Diagnostics

Computer Forensics - File Systems

Computer Forensics - File System Analysis

Computer Forensics - File System Analysis - TSK Informer

Computer Forensics - File System Analysis - Fragmentation

Computer Forensics - Data Recovery - Methodology

Computer Forensics - Data Recovery - TestDisk

Computer Forensics - Data Recovery - Hardware

Computer Forensics - Data Recovery - Hardware - HPA (Host Protected Area), SA (System Area) and DCO (Device Configuration Overlay)

Computer Forensics - Data Recovery - Hardware - CHS-LBA-PBA

Computer Forensics - Data Recovery - Hardware - Hard Disk Drive Barriers (Legacy)

Computer Forensics - Data Recovery - Hardware - Head Technology

Computer Forensics - Data Recovery - Hardware - Electronics

Computer Forensics - Data Recovery - Hardware - SSD (Solid State Disks)

Computer Forensics - Data Recovery - RAID

Computer Forensics - Data Recovery - Scrubbing and Sanitization

Computer Forensics - System Recovery

Computer Forensics - Volume Analysis

Computer Forensics - Volume Analysis - Hale Landis Classics

Computer Forensics - Volume Analysis - Boot Process

Computer Forensics - Volume Analysis - Boot Process - Loaders and Managers

Computer Forensics - Volume Analysis - Boot Process - Legacy Boot Code

Computer Forensics - Volume Analysis - Partitioning and Partition Tables - MBR

Computer Forensics - Volume Analysis - Partitioning and Partition Tables - GPT

Computer Forensics - Methodology and Evidence Acquisition

Computer Forensics - Disk and Forensic Imaging

Computer Forensics - Forensic Booting and Bootable Images - Technical

Computer Forensics - Forensic Booting and Bootable Images - CD-DVD

Computer Forensics - Forensic Booting and Bootable Images - USB

Computer Forensics - Forensic Booting and Bootable Images - Network

Computer Forensics - Memory Forensics and Analysis

Computer Forensics - Application and File Analysis

Computer Forensics - Steganography

Computer Forensics - Steganography - Image

Computer Forensics - Steganography - Steganalysis

Computer Forensics - Binary and Code Analysis

Computer Forensics - Binary and Code Analysis - Windows

Computer Forensics - Binary and Code Analysis - Windows - DLL's

Computer Forensics - Binary and Code Analysis - Windows - Mark Russinovich Papers

Computer Forensics - Binary and Code Analysis - Executable File Formats

Computer Forensics - Reverse Engineering

Computer Forensics - Malware

Computer Forensics - Malware - Historical

Computer Forensics - Malware - Denial-of-Service (DOS)

Computer Forensics - Malware - Root Kits

Computer Forensics - Malware - Virus and Worms

Computer Forensics - Malware - Trojans

Computer Forensics - Malware - Bots

Computer Forensics - Malware - Attacks

Computer Forensics - Malware - Vulnerabilities and Exploits

Computer Forensics - Malware - Shellcode and Buffer Overflows

Computer Forensics - IDS (Intrusion Detection and Systems)

Computer Forensics - Log Analysis

Computer Forensics - Timestamping

Computer Forensics - Password Recovery and Password Cracking

Computer Forensics - Windows

Computer Forensics - UNIX and Linux

Database Forensics

Database - Relational Database Management Systems

Database - SQL

Database - Oracle

Database - SQL Server

Definitive Guide To SQL Server Performance Optimization

by Don Jones

SQL Server 2000 Operations Guide

Microsoft Corporation

Database - DB2

Database - MySQL and PostgresSQL

Hardware Forensics

Hardware Forensics - CPU

Hardware Forensics - CPU Programming-Architecture-Specification

Hardware Forensics - Memory

Hardware Forensics - Hard Disk Drives (HDD)

Hardware Forensics - SSD (Solid State Disks)

Hardware Forensics - Hard Disk Storage Device Specifications

Hardware Forensics - CD and DVD

Hardware Forensics - BIOS

Hardware Forensics - Power

Hardware Forensics - UPS (Uninteruptable Power Supply) and Surge Protectors

Hardware Forensics - KVM Switches

Hardware Forensics - USB and Firewire

Hardware Forensics - Multimedia (Audio-Sound-Video)

Hardware Forensics - Cables and Connectors

Hardware Forensics - Communication Ports

Data Representation

Encryption

ITIL (Information Technology Information Library) - Network and Change Management

The Rainbow Books (DOD/NCSC Classics)

Original DOD and NCSC Documents

Contributed by the FAS (Federation of American Scientists)

Contributed By Windows Security

NSA (National Security Agency) Security Guides

NIST (National Institute for Standards and Technology) Security Guides

Whitepapers from SecurityFocus.com

Technical Books