Definition of Forensics
What is Forensics?
Computer forensics is the process of investigating data processing equipment-- typically a home computer, laptop, server, or office workstation-- to determine if the equipment has been used for illegal, unauthorized, or unusual activities. It can also include monitoring a network for the same purpose.
|
|
Forensics
|
|
Adventures in Computer Forensics
What exactly do forensic analysts do? How can this type of work help law enforcement or corporate security managers? If you want to solve a puzzle, isn't it often best to have all the pieces? Computer forensics is one piece to the investigative puzzle. There must be some need to conduct this type of investigation. Security managers and law enforcement alike must have proper authorization before conducting this type of analysis on a computer.
Read the Article
|
Macintosh Forensic Analysis Using OS X
The purpose of this paper is to describe sound forensic techniques as they pertain to the Macintosh. In order to accomplish this task, I must first describe basic forensic techniques that apply to all computer systems. Then I will provide a brief history of the various Macintosh models and operating systems, as each one can provide some intriguing problems. Finally, I will follow this up with a specific outline of how to perform the proper analysis of a Macintosh computer system using an OS X based system as the analysis machine. The result of this paper will be a useful reference to those people who may be required to perform a computer forensic analysis on a Macintosh.
Read the Article
|
Web Browser Forensics, Part 1
This article provides a case study of digital forensics, and investigates incriminating evidence using a user's web browser history.
Read the Article
|
Web Browser Forensics, Part 2
Part 2 of this web browser forensics series looks at reconstructing Mozilla Firefox' cache in order to catch an internal hacker using an administrator's account.
Read the Article
|
A Method for Forensic Previews
Perhaps the most compelling reason to use a forensic preview method is that it helps to maintain the evidentiary value of a target machine. By using a repeatable, documented method, and by carefully noting all actions taken, the investigator can rationally account for the state of gathered evidence.
Read the Article
|
Real-Time and Forensic Network Data Analysis Using Animated and Coordinated Visualization
This paper describes the implementation and lessons learned from the creation of a novel network traffic visualization system capable of both realtime and forensic data analysis. Combining the strength of link analysis using parallel coordinate plots with the timesequence animation of scatter plots, we examine a 2D and 3D coordinated display that provides insight into both legitimate and malicious network activity.
Read the Article
|
|
|
Page: 1 2 3 4 5
Members currently browsing this category:
|
|