I just got through answering your question on UPC's. I'm curious now - do you sit around making this junk up, or what? Do you think about how folks will answer before you post?
My reasoning for being a bit rude here is this - If someone wanted to write a forensics tutorial or post up a forensics journal here, it would've been done already. Perhaps it has - I haven't bothered searching it. Why don't you try and post the result? Here's a start for you: http://www.antionline.com/search.php...by=&sortorder=
Even a broken watch is correct twice a day.
Which coder said that nobody could outcode Microsoft in their own OS? Write a bit and make a fortune!