Forensics

Government

• Secret Service, Best Practices for Seizing Electronic Evidence linked from end of www.secretservice.gov/financial_crimes.shtml
• FBI Forensic Science Communications Journal
  • Handbook of Forensic Services (pdf)
• DoD Computer Forensics Laboratory
• US Secret Service Forensic Services Division
• DOJ
  • “Status and Needs of Forensic Science Service Providers: A Report to Congress”
  • DOJ Tracking a Computer Hacker, Daniel A. Morris, USA Bulletin (May 2001)
• NIST
  • PDA Forensic Tools:An Overview and Analysis, NIST 9/14/2004
  • NIST Computer Forensics Tool Testing (CFTT) Project Web Site
  • NIST Special Publication 800-61, Computer Security Incident Handling Guide., NIST 9/26/03
  • Draft NIST Special Publication 800-86, Guide to Computer and Network Data Analysis: Applying Forensic Techniques to Incident Response, NIST 8/12/2005

Resources

• Forensics
• IEEE/CreateNet Computer Network Forensics Research (CNFR) Workshop 2005
• Interop Network Forensics Day 2005
• Guide to Computer Forensics and Investigations Book Review 2004
• Network Forensics: Tapping the Internet O'Reilly 2002
• Good detective work means paying attention before, during, and after the attack. ACM Queue 2004
• CERT
  • First Responders Guide to Computer Forensics, CERT 6/10/2005
  • CERT: How the FBI Investigates Computer Crime July 2000
  • Carnegie Mellon University, Handbook for Computer Security Incident Response Teams

Tools

• Treachery Unlimited
• MoreNet
  • Looking Glass, IP BGP, IP Route, Trace, Route
• Ports
• Treachery Unlimited Port Lookup Search Results
• WHOIS

Laws

• PROTECT Our Children Act of 2008, Title II, recognized the needs to expands DOJ's CSI capabilities by expanding DOJ's computer forensics capacity - and DOJ gets to file an annual report on its expanded computer forensics capacity. $2m is appropriated for this
• The Adam Walsh Child Protection and Safety Act of 2006, Sec. 705, which called for Additional Computer-Related Forensics examiners, dedicated to investigating crimes involving the sexual exploitation of children and related offenses.

Links

• Immigration and Customs: Cyber Crime Center: Digital Forensics Section
• National Cyber-Forensics & Training Alliance a partnership of iC3, the National White Collar Crime Center, CMU, WVU, and Duquesne U.
• NIST Computer Forensic Reference Data Sets (CFReDS)
• US Secret Service Forensic Services Division
• DOE Cyber Forensics Center

News

• Cybercrime spurs college courses in digital forensics, USA Today 6/6/2006