22 replies to this topic

[Blacklebal]

I know I am a trial member and all but I think it would be a neat thing to also have a forum of Computer Forensics. I know I would find it useful.

[MindSmith]

I know I am a trial member and all but I think it would be a neat thing to also have a forum of Computer Forensics.  I know I would find it useful.

<{POST_SNAPBACK}>

Here, here - I second that opinion - What say GSO ?



#include<std.disclaimer.H>

[Blake]

Starting post some forensic related information and if popular I will create the forum.

[p0rnflake]

I just wrote an emergency Forensics guide for our organisation, could post it here - just gotta translate it to english first.. Do-able though if anyone is interested ??

[h40534]

Looks intresting . I think it will help many people out there

[PiP]

I'm interested p0rnflake, only if its not to much work.

If anyone has any info related to 'anti-forensics', like the stuff done by grugq, or any thing at all for that matter thats interesting post it

[SecureD]

I think to thats one usefull forum. But make sure it's clear what to post in it and what not.

[Core-TX]

I think it's a good thing 2 !

I'll give a quick link to have a beginning

hXXp://www.linux-forensics.com/

[Persona]

Forensics are useful 4 some I reckon.

[gbox]

some forensics classes at black hat europe I wish I could aford to go to, spesially Practical Digital Forensic Analysis wich looks realy sweet...
hxxp://www.blackhat.com/html/bh-europe-06/train-bh-eu-06-index.html

[p0rnflake]

I'm interested p0rnflake, only if its not to much work.

If anyone has any info related to 'anti-forensics', like the stuff done by grugq, or any thing at all for that matter thats interesting post it

Sorry about the late reply - I'm swamped at work right now - but will try to make time for it.

[Nick W]

There's already a little bit about these on these forums if you view the posts like about Auditor and Whoppix and WHAX and some of the other bootable Linux distros out there.

Some of them even have little tutorials on their homesites, like Auditor does on remote-exploit.org I think. This is an interesting topic, but not a lot of info is available on the web because there are many different methods of doing forensic analysis.

Especially across OS, like Windows and Linux. Depending on which is on the hard drive, there's two different methods for looking at the system.

[gbox]

this is a good forensics site with alot of nice information whitepapers, presentation and tools :
hxxp://www.forensics.nl/
also the book incident response and computer forensics is a book Ive found usefully, its a starters book who gives the basics of both windows and linux systems...

Edited by gbox, 04 January 2006 - 02:48 AM.

[deek]

Hi,

I gave a presentation on computer forensics utilizing tools such as sleuthkit. I can edit them to be more appropriate for a web audience if you would like. Then once i understand the appropriate moderator to contact about getting them posted, we can go from there.

=)

-Deek

[ocdavi]

I love this topic and would apprecaite all of the information I could get on it, but on the other hand...

I really don't think there is enough expertise, need for knowledge and information available to deserve an entire forum. If people have questions, comments or concerns regarding forensics I am sure you can find a place to post on an already created forum