Forensic Computing & Analysis

Warning - this is old ;) I'm not in the forensics biz anymore, it was fun a long, long time ago when no one was doing it and thought it all impossible....

Forensic computing is yet another computer security topic that Wietse and I are working on. Way back when we wrote the paper Improving the Security of Your Site by Breaking Into It (1993), the SATAN tool, (1995), and a Computer Security Auditing Class (1996).

Forensic Discovery - our book at amazon or - never thought I'd see the day - at walmart!
The Coroner's Toolkit (TCT)
The Coroner's Toolkit (TCT) is a collection of tools that are either oriented towards gathering or analyzing forensic data on a Unix system.
Forensic Computing Class Handouts
We taught a (one-time) class on August 6th, 1999, in an attempt to teach ourselves and others about forensic computing and analysis.
DDJ Forensic Computing Column
We also wrote a half-dozen columns for the oh-so-fine Doctor Dobb's Journal. In order: