Forum: Computer Forensics

I fired up filemon to see what was going on behind the scenes and I saw some interesting stuff... I tried to locate these files but can't find them....

Just found a great article (.PDF) on Limewire Forensics by Joseph Lethwaite and Victoria Smith: ...

This is a sample Incident Response report that I recently completed. I thought people might be interested in seeing what a report *might* look like....

My ex recently borrowed my laptop and I think he's spying on me cos I discovered a keylogger installed on my laptop.I confronted him yesterday and he...

Anyone know of a working .ithmb viewer software for PC. I know there was one from a while back that was only minimally developed but can't even find...

How do I view a files Standard Information and File Name tags which are stored in the Master File Table?

Anyone know of a tool that will export messages out of a Microsoft Outlook PST file to a text file? Preferably one that will run in Windows.

I am trying to get a list of the best low level DoD standard format tools... I wanna try them then run helix and other data recovery programs to find...

I have been working on a paper dealing with how data is stored, deleted, and recovered on hard drives for the last few weeks. In the course of my...

Does anyone know where I can find a MS .doc metadata viewer? I would like one that I can use to strip the metadata and view it. Thanks.

http://www.securityfocus.com/brief/888 Found this article linked on Slashdot ... What do you guys think? Are multiple wipes/rewrites a waste...

IP = ID?? How can this be possible? A man in WNY was arrested and sentenced to a year in jail over an email with the sole piece of evidence being...

I'm writing a paper over anti-forensics and i was wondering if anybody had any particular anti-forensic tools that they liked or have read about. ...

Anyone think that Evidence Eliminator is not working or does it not perform as thought? ...

http://www.usdoj.gov/jmd/publications/carnivore_draft_1.pdf I am in the middle of reading this. It is a good read. but it is published by the US...

Take a look at the traffic below and see if you can figure out what is going on. the ip's are of no consequence to the challenge btw. ...

Get as much detail out of this trace as possible. Remember all the answers are there in the packets themselves. Also remember Google is your friend!...

So, I've got phase one (written exam) of my EnCE cert coming up next month. Anybody have any tips, tricks, pointers, or studying suggestions?

So I like to brainstorm ideas for businesses when I am bored. An idea I had come up with was a business that people could call when they think there...