Computer Forensics Home	Publications	300447 Computer Forensics Workshop	Books And Journals	Hardware	Software	Interesting Links	Online Materials
		300447 Template

Publications About Computer Forensics, General

• What is Forensic Computing? by Rodney McKemmish, Australian Institute of Criminology, June 1999
• Computer Forensics for Lawyers Who Can’t Set the Clock on their VCR by Craig D. Ball, 2004
• Forensic Computing, Developing a Conceptual Approach for an Emerging Academic Discipline, Broucek & Turner, (2003?), Australia
• E-mail and WWW browsers: A Forensic Computing Perspective on the Need for Improved User Education for Information Systems Security Management, Vlasti Broucek, Paul Turner, University of Tasmania, 2002, Australia
• Forensic Computing: An Introduction to the Principles and the Practical Applications, by Jesse Landman, 15 April 2002
• Computer Forensics: The Key to Solving the Crime by Lisa Oseles, 7 October 2001

Australian Government Publications, General

• E-Crime A Crime Prevention Kit for Small Business, National Community Crime Prevention Programme (2004?).

Publications of Australasian Centre for Policing Research (ACPR)

• Minimum Provisions for the Investigation of Computer Based Offences, Publication No. 129.1, author: D. Thompson & D. Berwick, publication Date: 1997)
• Seizing Computers and Other Electronic Evidence, publication Date: March 2003 (short brochure)
• Computer Crime: The improvement of investigative skills: Final report. Publication No. 96 Author: P Morrison (part one) and Publication No. 101 Author: D Thompson (part two). Publication Date: 1990. This are old document, some sections are obsolete.
• The forensic challenges of e-crime, Publication No. CC 3, Author: Barbara Etter, Publication Date: October 2001
• Electronic Crime Strategy of the Police Commissioners' Conference Electronic Crime Steering Committee 2001 - 2003, Author: Police Commissioners' Conference Electronic Crime Steering Committee, Publication Date: 2001
• The Virtual Horizon: Meeting the law enforcement challenges. Developing an Australasian law enforcement strategy for dealing with electronic crime. Scoping Paper. Publication No. 134.1, Author: Police Commissioners' Conference Electronic Crime Working Party, Publication Date: 2000

Guidelines, Standards, Proposed Standards

• SWGDE Validation Guidelines, July 2004
• FBI Handbook of Forensics Services, 2003. Contans section relating to computers.
• PDA (Personal Digital Assistant) Forensics Tools: An Overview and Analysis, published by NIST (National Institute of Standards and Technology), USA.
• NIST Computer Security Incident Handling Guide. Guidance Software comments on the recently released NIST Computer Security Incident Handling Guide.
• Incident Response Requirements Under ISO 17799. Since its adoption, ISO 17799 has quickly emerged as the international standard for information security best practices.
• Guidelines for Best Practices in Examination of Digital Evidence, a Quality Assurance "core" document, IOCE (International Organization on Computer Evidence) 2002 Digital Evidence Standards Working Group.

Search and Seizure of Computers and Data in Criminal Cases; Electronic Crime Scene Investigation

• Forensic Examination of Digital Evidence: A Guide for Law Enforcement, April 2004. This guide is intended for use by members of the law enforcement community who are responsible for the examination of digital evidence. Published by National Institute of Justice, The Research, Development, and Evaluation Agency of the U.S. Department of Justice.
• Electronic Crime Scene Investigation: A Guide for First Responders, July 2001. This NIJ Guide (NCJ 187736) is intended for use by law enforcement and other responders who have the responsibility for protecting an electronic crime scene and for the recognition, collection, and preservation of electronic evidence. Published by National Institute of Justice, The Research, Development, and Evaluation Agency of the U.S Department of Justice.
• Search and Seizure of Computers and Data: Annotated Bibliography, Kenneth J. Withers, June 25, 2004 presented at the National Workshop for U.S. Magistrate Judges. USA.
• Joint Administrative Office/Department Of Justice Working Group on Electronic Technology in the Criminal Justice System, Report and Recommendation, 2003, USA
• Best Practice Guidelines for Examination of Digital Evidence, published by IOCE International Organization on Computer Evidence
• Getting Physical with the Digital Investigation Process, International Journal of Digital Evidence (IJDE), Fall 2003, Volume 2 Issue 2.

Sample Forms, Orders, Affadavits & Testimonies

• Excerpt from Searching and Seizing Computers and Obtaining Electronic Evidence in Criminal Investigations, Second Edition Source: Computer Crime and Intellectual Property Section, Criminal Division, U.S. Department of Justice, September 2002
• Sample Language for Search Warrants and Accompanying Affidavits to Search and Seize Computers. Source: United States Department of Justice, 2002
• Sample Addendum to a search warrant for computer evidence, contributed by Judge Jeff Kaplan (N.D. Tex.), USA
• Testimony of Detective Keene, David Westerfield case; Computer Forensic examination. Source: San Diego, California, USA, 2001
• External link to EnCase Legal Resources: features legal white papers the EnCase Legal Journal and court citations for the computer forensics investigator.

Legal Issues Relating to Computer Forensics

• Open Source Digital Forensics Tools: The Legal Argument by Brian Carrier. This paper addresses open source digital forensic analysis tools and their use in a legal setting. It argues that open source tools may more clearly and comprehensively meet the guidelines than closed source tools would.
• Gatekeeping Out Of The Box: Open Source Software As A Mechanism To Assess Reliability For Digital Evidence, from Virginia Journal of Law and technology (link only).
• Discovery of Digital Information by Ronald J. Hedges, U.S.M.J., September 27, 2004

Wite papers; courtesy of Guidance Software

• Computer Forensics as an Integral Component of the Information Security Enterprise. Forensics is not for just law enforcement; information security professionals should consider forensics as part of their standard security repertoire.
• Computer Forensics and Windows XP. Windows XP presents new challenges to the forensic investigator. Read how to overcome these challenges.
• Date, Time, and Time Zone Examination. A Discussion of Computer Date-Time Representation and Its Impact on Forensic Investigation.
• Steganography-based Forensic Techniques Using EnCase® 4.0. Overview of steganography tools and techniques for finding hidden data by Terrence Lillard.
• New Incident Response Best Practices. Patch and proceed is no longer acceptable incident response procedure.
• Basel Committee Incident Response Standards. This paper discusses the report that sets 14 risk management principles for electronic banking
• Internal Computer Investigations as a Critical Control Activity Under Sarbanes-Oxley. This paper discusses the Internal Computer Investigations as a Critical Control Activity Under Sarbanes-Oxley.