Forensic Computing & Analysis

Forensic computing is yet another computer security topic that Wietse and I have worked on.

We finally made it: Forensic Discovery is finished:

It can be purchased from an physical book store (frequent those!), Amazon, or Addison-Wesley, or wherever else you go for books. We've also set up its own web page with programs, errata, and most of the text.

  • The Coroner's Toolkit (TCT)

    The Coroner's Toolkit (TCT) is a collection of tools that are either oriented towards gathering or analyzing forensic data on a Unix system.

  • Forensic Computing Class Handouts

    We taught a (one-time) class on August 6th, 1999, in an attempt to teach ourselves and others about forensic computing and analysis.

  • DDJ Forensic Computing Column

    We also wrote a half-dozen columns for the oh-so-fine Doctor Dobb's Journal. In order: