Computer Forensics Resources

Computer forensics have even modernized the way scientists use fingerprints.

Computers are both a help and a hindrance to modern legal investigations. Computers allow organizations to create databases of identifying information to compare with an unknown characteristic, such as the Integrated Automated Fingerprint Identification System that United States legal organizations use. However, computers also contain countless gigabytes of information that investigators must locate, examine and report to use as evidence; this can be a tedious process. Computer forensics is the study of this potential evidence.

The Computer Forensics Toolkit

The "Computer Forensics Toolkit" is a book that forensic scientists or those interested in computer forensics can purchase and download online. It exists only as a digital book. As of July, 2010 the Toolkit costs $199. Potential customers can preview the contents of the book at the official websites before making a purchase. The book includes information on presenting forensic evidence to management, forms related to computer forensics, and procedures to following when specific situations occur. For example, the Toolkit instructs a scientist on the proper course of action when a destructive software program is running on the computer in question. Finally, the the guide includes a forensics glossary, investigation checklists and a list of additional computer forensics resources.

"6 On Forensics"

This online document contains six articles relating to computer forensics for individuals whose work may be related to but does not rely on computer forensics. Craig Ball, a trial lawyer and computer forensic examiner, originally created this document for lawyers who may have to use forensic evidence to win their legal cases. Ball explains the basics of computer operations and forensics through the document. In addition, the articles include advice about cross examining a computer forensics specialist, gaining access to digital evidence, using e-mail in civil discovery and finding the right computer forensic specialist with whom to work.

PDA Forensic Tools

This online publication from the National Institute of Standards and Technology aims to "inform law enforcement, incident response team members, and forensic examiners" about the potential forensic evidence that forensic specialists can extract from digital devices such as a Personal Digital Assistant. The publication focuses on PDAs because they are becoming increasingly more common in the workplace and can contain data that is crucial to a legal investigation or case. The NIST outlines proper procedures for seizing a PDA, tools for extracting information and how to report the findings. Furthermore, the document discusses difference between the various operating systems that a PDA may use, including Palm OS, Windows and Linux.

Windows Forensic Analysis DVD Toolkit

The Windows Forensic Analysis DVD Toolkit is a book and DVD combination by Harlan Carvey that explains computer forensics when the computer in question relies on Microsoft's Windows operating system. The book aids responders, examiners or analysts in the task of recovering data during live or post mortem investigations. Windows Forensic Analysis DVD Toolkit may be also useful to system administrators who have control or access to computer forensic evidence when an incident occurs. Furthermore, this kit includes a companion DVD that contains forensic tools such as movies, spreadsheets and computer code. The second edition is the most recent edition and it contains updated information from the original release. Consumers may purchase this kit from online retailers and booksellers.

Computer Forensics Resources

The "Computer Forensics, Cybercrime and Steganography Resources" website is entirely devoted to a wide variety of computer forensic resources. It includes links to other online resources, such as papers available as online publications, as well as a list of books related to computer forensics. The website also contains links to online presentations by professionals in the field of computer forensics. Furthermore, those interested in forensic science can find communities, including mailing lists and forums, so that they can communicate with others who are interested or work with computer forensics. Finally, there is an entire section of the website devoted to computer forensics software that can aid examiners in gaining access to and understanding information on computers.

References

• The Computer Forensics Toolkit
• Computer Forensics, Cybercrime and Steganography Resources
• Syngress:Windows Forensic Analysis DVD Toolkit, Second Edition
• NIST:PDA Forensic Tools: An Overview and Analysis
• Craig Ball:6 on Forensics

Resources

• Global Digital Forensics:COMPUTER FORENSIC RESOURCES
• FBI:The Integrated Automated Fingerprint Identification System (IAFIS)