ADDITIONAL RESOURCES
LECTURE SLIDES
Some useful reference links:
Digital Forensics Research Workshops.
This site contains forensics conference papers, yearly forensics challenges and other information since 2001.
Open Memory Forensics Workshop (OMFW) of The Volatility Foundation.
The Volatility Foundation was established to promote the use of Volatility and memory analysis within the forensics community, defend the project's intellectual property and longevity, and to help advance innovative memory analysis research. The Open Memory Forensics Workshop (OMFW) is for those people who realize that the only real defense against a creative technical human adversary is a creative technical human analyst.
SANS Investigative Forensic Toolkit (SIFT) contains many forensics tools we will cover in this class. The SANS institute provides lessons, discussion, and tools.
Report Writing Guidelines, Melia Kelley, Forensic Magazine
Template Summary from this article
-
- Title page
Case name, date, investigator name, and contact information - Table of Contents
- Executive Summary
High level view of important findings - Objectives
- Evidence Analyzed
Serial numbers, hash values, pictures taken at the scene, etc. - Steps Taken
Your results should be reproducible including software and hardware used, and version numbers. - Relevant Findings
Documents of Interest; Internet Activity; Software of Note; USB Devices, etc. - Timeline
A concise timeline of important events, possibly using a good graphic - Conclusion
Highlight the important issues in a list of concise findings - Signature
Your report should be signed - Exhibits
Your curriculum vitae, chain of custody documentation, supporting document linked from the body of the report, etc.
- Title page