| Date |
Type |
Title |
Author |
Event |
| May 08, 2012 |
Video |
FrozenCache
|
Juergen Pabel
|
Chaos Communication Congress 27th (27C3) 2010 |
| May 08, 2012 |
Slides |
FrozenCache
|
Juergen Pabel
|
Chaos Communication Congress 27th (27C3) 2010 |
| May 07, 2012 |
Audio |
FrozenCache
|
Juergen Pabel
|
Chaos Communication Congress 27th (27C3) 2010 |
| April 30, 2012 |
Slides |
Data Recovery Techniques
|
Peter Franck
|
Chaos Communication Congress 27th (27C3) 2010 |
| April 30, 2012 |
Video |
Data Recovery Techniques
|
Peter Franck
|
Chaos Communication Congress 27th (27C3) 2010 |
| April 29, 2012 |
Audio |
Data Recovery Techniques
|
Peter Franck
|
Chaos Communication Congress 27th (27C3) 2010 |
| February 26, 2012 |
Video |
Death of a Thousand cuts – Forensics
|
Johnny Long
|
DEFCON 13 |
| February 26, 2012 |
Audio |
Death of a Thousand cuts – Forensics
|
Johnny Long
|
DEFCON 13 |
| February 02, 2012 |
Slides |
Evolution of iOS Data Protection and iPhone Forensics: from iPhoneOS to iOS 5
|
Andrey Belenko
Dmitry Sklyarov
|
Black Hat Abu Dhabi 2011 |
| January 17, 2012 |
Slides |
New Directions in Disk Forensics
|
Simson L. Garfinkel
|
Black Hat Federal 2006 |
| January 17, 2012 |
Slides |
Finding Digital Evidence in Physical Memory
|
Mariusz Burdach
|
Black Hat Federal 2006 |
| January 13, 2012 |
Slides |
Web Application Incident Response & Forensics: A Whole New Ball Game!
|
Chuck Willis
Rohyt Belani
|
Black Hat USA 2006 |
| January 08, 2012 |
Slides |
You Are What You Type: Non-Classical Computer Forensics
|
Neal Krawetz
|
Black Hat USA 2006 |
| January 02, 2012 |
Slides |
Finding Gold in the Browser Cache
|
Corentin Chéron
|
Black Hat USA 2006 |
| January 02, 2012 |
Slides |
Physical Memory Forensics
|
Mariusz Burdach
|
Black Hat USA 2006 |
| January 01, 2012 |
Slides |
Input Attack Trees: Death of a Thousand Leaves
|
Heikki Kortti
|
Black Hat Asia 2006 |
| January 01, 2012 |
Slides |
Winny P2P Security
|
Takayuki Sugiura
|
Black Hat Asia 2006 |
| December 31, 2011 |
Slides |
Low Down and Dirty: Anti-Forensic Rootkits
|
Darren Bilby
|
Black Hat Asia 2006 |
| December 28, 2011 |
Slides |
The Art of Defiling: Defeating Forensic Analysis
|
|
Black Hat EU 2005 |
| December 20, 2011 |
Slides |
The Art of Defiling: Defeating Forensic Analysis
|
|
Black Hat USA 2005 |
| December 20, 2011 |
Slides |
Catch Me If You Can: Exploiting Encase, Microsoft, Computer Associates, and the rest of the bunch…
|
James C. Foster
Vincent T. Liu
|
Black Hat USA 2005 |
| December 18, 2011 |
Slides |
Forensics in Japan
|
Hideaki Ihara
|
Black Hat Asia 2005 |
| December 15, 2011 |
Slides |
Without a Trace: Forensic Secrets for Windows Servers
|
James C. Foster
Mark Burnett
|
Black Hat Windows Security 2004 |
| December 14, 2011 |
Slides |
Data Hiding On A Live (NTFS) System
|
Harlan Carvey
|
Black Hat Windows Security 2004 |
| December 10, 2011 |
Slides |
The Art of Defiling: Defeating Forensic Analysis on Unix File Systems
|
|
Black Hat EU 2004 |
| December 03, 2011 |
Slides |
Legal Liability and Security Incident Investigation
|
Jennifer Granick
|
Black Hat USA 2004 |
| November 25, 2011 |
Slides |
NT/2K Incident Response and Mining for Hidden Data: Post Mortem of a Windows Box
|
Harlan Carvey
|
Black Hat Windows Security 2002 |
| November 19, 2011 |
Slides |
The USA Patriot Act and Criminal Investigations
|
Mark Eckenwiler
|
Black Hat USA 2002 |
| November 19, 2011 |
Slides |
Forensic Dead-Ends
|
Len Sassaman
|
Black Hat USA 2002 |
| November 17, 2011 |
Paper |
Cisco Router Forensics
|
Thomas Akin
|
Black Hat USA 2002 |
| November 17, 2011 |
Slides |
Scene of the Cybercrime
|
Debra Littlejohn Shinder
|
Black Hat USA 2002 |
| November 16, 2011 |
Slides |
Cisco Router Forensics
|
Thomas Akin
|
Black Hat USA 2002 |
| November 14, 2011 |
Slides |
Forensics Tools and Processes for Windows XP Platforms
|
Larry Leibrock
|
Black Hat Asia 2002 |
| November 13, 2011 |
Slides |
Computer Forensics - Tracking the Cyber Vandals
|
Martin Khoo
|
Black Hat Asia 2002 |
| November 10, 2011 |
Slides |
Computer Forensics With An Emphasis On The NT Operating System
|
Paul T. Mobley
|
Black Hat Windows Security 2001 |
| November 06, 2011 |
Slides |
Computer Forensics: A Critical Process in Your Incident Response Plan
|
Gregory S. Miles
|
Black Hat USA 2001 |
| October 28, 2011 |
Slides |
Auditing and Forensics on NT
|
|
Black Hat Asia 2000 |
| October 24, 2011 |
Slides |
What Is Involved In a Forensic Effort
|
John Tan
|
Black Hat EU 2000 |
| October 24, 2011 |
Slides |
The Need For Forensic Capabilities In The Commercial Sector
|
Dominique Brezinski
|
Black Hat USA 2000 |
| October 19, 2011 |
Slides |
Forensics Tools and Processes for Windows® XP Platforms
|
Larry Leibrock
|
Black Hat Windows Security 2003 |
| October 16, 2011 |
Slides |
Digital Information, User Tokens, Privacy and Forensics Investigations: The Case of Windows XP Platform
|
Larry Leibrock
|
Black Hat EU 2003 |
| October 10, 2011 |
Slides |
Web Based Email Forensics
|
Thomas Akin
|
Black Hat USA 2003 |
| October 10, 2011 |
Slides |
Digital Information, User Tokens, Privacy and Forensics Investigations
|
Larry Leibrock
|
Black Hat USA 2003 |
| October 10, 2011 |
Slides |
Forensics With Linux 101
|
Chuck Willis
|
Black Hat USA 2003 |
| October 03, 2011 |
Slides |
Digital Information, User Tokens, Privacy and Forensics Investigations
|
Larry Leibrock
|
Black Hat Federal 2003 |
| September 29, 2011 |
Slides |
The Art of Defiling: Defeating Forensic Analysis on Unix File Systems
|
|
Black Hat Asia 2003 |
| September 28, 2011 |
Paper |
Blue Screen Of the Death is dead
|
Matthieu Suiche
|
Black Hat USA 2010 |
| September 27, 2011 |
Slides |
Blue Screen Of the Death is dead
|
Matthieu Suiche
|
Black Hat USA 2010 |
| September 04, 2011 |
Slides |
Virtual Forensics
|
Christiaan Beek
|
Black Hat USA 2010 |
| August 17, 2011 |
Video |
All Your Evidence Is Belong To Us: Antiforensics and You
|
Morgan Marquis-Boire
|
Hashdays 2010 |
| August 09, 2011 |
Paper |
Volatools: Integrating Volatile Memory Forensics into the Digital Investigation Process
|
Aaron Walters
Nick Petroni
|
Black Hat DC 2007 |
| August 09, 2011 |
Slides |
Volatools: Integrating Volatile Memory Forensics into the Digital Investigation Process
|
Aaron Walters
Nick Petroni
|
Black Hat DC 2007 |
| August 06, 2011 |
Slides |
Beyond The CPU: Defeating Hardware Based RAM Acquisition Tools (Part I: AMD case)
|
Joanna Rutkowska
|
Black Hat DC 2007 |
| June 01, 2011 |
Slides |
Database Forensics
|
David Litchfield
|
Black Hat USA 2007 |
| May 23, 2011 |
Paper |
A Picture's Worth...
|
Neal Krawetz
|
Black Hat USA 2007 |
| May 23, 2011 |
Slides |
A Picture's Worth...
|
Neal Krawetz
|
Black Hat USA 2007 |
| May 11, 2011 |
Paper |
Stealth Secrets of the Malware Ninjas
|
Nick Harbour
|
Black Hat USA 2007 |
| May 11, 2011 |
Slides |
Stealth Secrets of the Malware Ninjas
|
Nick Harbour
|
Black Hat USA 2007 |
| May 05, 2011 |
Paper |
SQL Server Database Forensics
|
Kevvie Fowler
|
Black Hat USA 2007 |
| May 05, 2011 |
Slides |
SQL Server Database Forensics
|
Kevvie Fowler
|
Black Hat USA 2007 |
| April 09, 2011 |
Audio |
Meet the Feds - CSI:TCP/IP
|
|
DEFCON 18 |
| March 29, 2011 |
Slides |
A New Approach to Forensic Methodology - !!BUSTED!! case studies
|
David C. Smith
Samuel Petreski
|
DEFCON 18 |
| March 29, 2011 |
Audio |
A New Approach to Forensic Methodology - !!BUSTED!! case studies
|
David C. Smith
Samuel Petreski
|
DEFCON 18 |
| March 29, 2011 |
Video |
A New Approach to Forensic Methodology - !!BUSTED!! case studies
|
David C. Smith
Samuel Petreski
|
DEFCON 18 |
| March 28, 2011 |
Audio |
pyREtic - In memory reverse engineering for obfuscated Python bytecode
|
Rich Smith
|
DEFCON 18 |
| March 28, 2011 |
Slides |
pyREtic - In memory reverse engineering for obfuscated Python bytecode
|
Rich Smith
|
DEFCON 18 |
| March 17, 2011 |
Slides |
Sniper Forensics - One Shot, One Kill
|
Christopher Pogue
|
DEFCON 18 |
| December 30, 2010 |
Slides |
How to do Real World Computer Forensics ... and not get Burned
|
Nick Klein
|
Ruxcon 2010 |
| December 09, 2010 |
Video |
Building your own secure U3 launchable Windows forensic toolkit
|
Jason Kendall
|
SecTor 2010 |
| December 09, 2010 |
Slides |
Building your own secure U3 launchable Windows forensic toolkit
|
Jason Kendall
|
SecTor 2010 |
| December 03, 2010 |
Slides |
Sniper Forensics v2.0 - Target Acquisition
|
Christopher Pogue
|
SecTor 2010 |
| November 18, 2010 |
Video |
Analyzing Intrusions and Intruders
|
Sean M. Bodmer
|
PhreakNIC 11 |
| November 17, 2010 |
Video |
DIY Data Recovery Diagnostics
|
Scott Moulton
|
PhreakNIC 13 |
| November 15, 2010 |
Video |
Its 9AM do you know where your hashes are
|
Brian Wilson
Ryan Linn
|
PhreakNIC 13 |
| November 06, 2010 |
Slides |
Unified memory forensic toolset for Virtual Machine
|
Nguyen Anh Quynh
|
AVTokyo 2009 |
| November 06, 2010 |
Slides |
Lack of System Registers and two simple anti-forensic attacks
|
Tsukasa Ooi
|
AVTokyo 2009 |
| November 04, 2010 |
Video |
Digital Forensics
|
Andrew Immerman
|
LayerOne 2006 |
| November 04, 2010 |
Slides |
Digital Forensics
|
Andrew Immerman
|
LayerOne 2006 |
| November 02, 2010 |
Video |
Anti-Forensics
|
Paul Henry
|
LayerOne 2006 |
| November 02, 2010 |
Slides |
Anti-Forensics
|
Paul Henry
|
LayerOne 2006 |
| October 29, 2010 |
Video |
Volatile Memory Forensics
|
|
LayerOne 2008 |
| October 29, 2010 |
Slides |
Volatile Memory Forensics
|
|
LayerOne 2008 |
| October 26, 2010 |
Video |
Virtual Traces
|
Diane Barrett
|
LayerOne 2008 |
| October 26, 2010 |
Slides |
Virtual Traces
|
Diane Barrett
|
LayerOne 2008 |
| October 24, 2010 |
Video |
Lockpicking Forensics
|
|
LayerOne 2009 |
| October 24, 2010 |
Slides |
Lockpicking Forensics
|
|
LayerOne 2009 |
| October 12, 2010 |
Paper |
Android Forensics: Simplifying Cell Phone Examinations
|
Gary C. Kessler
Jeff Lessard
|
|
| October 02, 2010 |
Slides |
Improving the Stealthiness of Web Hacking
|
Laurent Oudot
|
Hack In The Box 2010 Dubai |
| September 23, 2010 |
Slides |
Detecting Computer Intrusions: Are You Pwned?
|
Steve Anson
|
Hack In The Box 2009 Dubai |
| September 18, 2010 |
Slides |
Detecting Computer Intrusions: Are You Pwned?
|
Steve Anson
|
Hack In The Box 2009 Malaysia |
| September 08, 2010 |
Slides |
Network Forensics for Dummies
|
Meling Mudin
|
Hack In The Box 2009 Malaysia |
| August 31, 2010 |
Slides |
SQL Server Anti-Forensics
|
Cesar Cerrudo
|
Black Hat DC 2009 |
| August 31, 2010 |
Audio |
SQL Server Anti-Forensics
|
Cesar Cerrudo
|
Black Hat DC 2009 |
| August 31, 2010 |
Video |
SQL Server Anti-Forensics
|
Cesar Cerrudo
|
Black Hat DC 2009 |
| August 18, 2010 |
Audio |
Let Your Mach-O Fly
|
Vincenzo Iozzo
|
Black Hat DC 2009 |
| August 18, 2010 |
Video |
Let Your Mach-O Fly
|
Vincenzo Iozzo
|
Black Hat DC 2009 |
| August 16, 2010 |
Video |
The Forensic Investigation of a Compromised Oracle Database Server
|
David Litchfield
|
Black Hat DC 2009 |
| August 15, 2010 |
Audio |
The Forensic Investigation of a Compromised Oracle Database Server
|
David Litchfield
|
Black Hat DC 2009 |
| August 05, 2010 |
Video |
Windows Hibernation File for Fun and Profit
|
Matthieu Suiche
|
Black Hat USA 2008 |
| August 05, 2010 |
Audio |
Windows Hibernation File for Fun and Profit
|
Matthieu Suiche
|
Black Hat USA 2008 |
| August 05, 2010 |
Slides |
Windows Hibernation File for Fun and Profit
|
Matthieu Suiche
|
Black Hat USA 2008 |
| July 31, 2010 |
Video |
Meet The Owner Of a Real Hacked Company - Forensic Investigation
|
Mark Shelhart
|
Black Hat USA 2008 |
| July 31, 2010 |
Slides |
Meet The Owner Of a Real Hacked Company - Forensic Investigation
|
Mark Shelhart
|
Black Hat USA 2008 |
| July 31, 2010 |
Audio |
Meet The Owner Of a Real Hacked Company - Forensic Investigation
|
Mark Shelhart
|
Black Hat USA 2008 |
| July 20, 2010 |
Audio |
Braving the Cold: New Methods for Preventing Cold Boot Attacks on Encryption Keys
|
Patrick McGregor
|
Black Hat USA 2008 |
| July 20, 2010 |
Slides |
Braving the Cold: New Methods for Preventing Cold Boot Attacks on Encryption Keys
|
Patrick McGregor
|
Black Hat USA 2008 |
| July 20, 2010 |
Video |
Braving the Cold: New Methods for Preventing Cold Boot Attacks on Encryption Keys
|
Patrick McGregor
|
Black Hat USA 2008 |
| July 18, 2010 |
Audio |
Developments in Cisco IOS Forensics
|
Felix 'FX' Lindner
|
Black Hat USA 2008 |
| July 18, 2010 |
Slides |
Developments in Cisco IOS Forensics
|
Felix 'FX' Lindner
|
Black Hat USA 2008 |
| July 18, 2010 |
Video |
Developments in Cisco IOS Forensics
|
Felix 'FX' Lindner
|
Black Hat USA 2008 |
| July 16, 2010 |
Audio |
Mobile Phone Messaging Anti-Forensics
|
Zane Lackey
Luis Miras
|
Black Hat USA 2008 |
| July 16, 2010 |
Slides |
Mobile Phone Messaging Anti-Forensics
|
Zane Lackey
Luis Miras
|
Black Hat USA 2008 |
| July 16, 2010 |
Video |
Mobile Phone Messaging Anti-Forensics
|
Zane Lackey
Luis Miras
|
Black Hat USA 2008 |
| June 30, 2010 |
Audio |
Visual Forensic Analysis and Reverse Engineering of Binary Data
|
Greg Conti
Erik Dean
|
Black Hat USA 2008 |
| June 30, 2010 |
Video |
Visual Forensic Analysis and Reverse Engineering of Binary Data
|
Greg Conti
Erik Dean
|
Black Hat USA 2008 |
| June 22, 2010 |
Video |
Hiding in the Familiar: Steganography and Vulnerabilities in Popular Archives Formats
|
Mario Vuksan
Tomislav Pericin
Brian Karney
|
Black Hat EU 2010 |
| June 22, 2010 |
Slides |
Hiding in the Familiar: Steganography and Vulnerabilities in Popular Archives Formats
|
Mario Vuksan
Tomislav Pericin
Brian Karney
|
Black Hat EU 2010 |
| June 09, 2010 |
Slides |
Virtual Forensics
|
Christiaan Beek
|
Black Hat EU 2010 |
| May 24, 2010 |
Paper |
Advanced Mac OS X Physical Memory Analysis
|
Matthieu Suiche
|
Black Hat DC 2010 |
| May 24, 2010 |
Slides |
Advanced Mac OS X Physical Memory Analysis
|
Matthieu Suiche
|
Black Hat DC 2010 |
| May 15, 2010 |
Video |
Exploiting Lawful Intercept to Wiretap the Internet
|
Tom Cross
|
Black Hat DC 2010 |
| May 15, 2010 |
Slides |
Exploiting Lawful Intercept to Wiretap the Internet
|
Tom Cross
|
Black Hat DC 2010 |
| May 15, 2010 |
Paper |
Exploiting Lawful Intercept to Wiretap the Internet
|
Tom Cross
|
Black Hat DC 2010 |
| May 15, 2010 |
Audio |
Exploiting Lawful Intercept to Wiretap the Internet
|
Tom Cross
|
Black Hat DC 2010 |
| May 13, 2010 |
Paper |
An Uninvited Guest (Who Won’t Go Home)
|
Bill Blunden
|
Black Hat DC 2010 |
| May 13, 2010 |
Slides |
An Uninvited Guest (Who Won’t Go Home)
|
Bill Blunden
|
Black Hat DC 2010 |
| April 13, 2010 |
Video |
RAID Recovery: Recover your PORN by Sight and Sound
|
Scott Moulton
|
DEFCON 17 |
| April 13, 2010 |
Slides |
RAID Recovery: Recover your PORN by Sight and Sound
|
Scott Moulton
|
DEFCON 17 |
| April 13, 2010 |
Audio |
RAID Recovery: Recover your PORN by Sight and Sound
|
Scott Moulton
|
DEFCON 17 |
| March 10, 2010 |
Video |
Hacking the Apple TV and Where your Forensic Data Lives
|
Randy Robbins
Kevin Estis
|
DEFCON 17 |
| March 10, 2010 |
Slides |
Hacking the Apple TV and Where your Forensic Data Lives
|
Randy Robbins
Kevin Estis
|
DEFCON 17 |
| March 10, 2010 |
Audio |
Hacking the Apple TV and Where your Forensic Data Lives
|
Randy Robbins
Kevin Estis
|
DEFCON 17 |
| March 05, 2010 |
Video |
Lockpicking Forensics
|
|
DEFCON 17 |
| March 04, 2010 |
Audio |
Lockpicking Forensics
|
|
DEFCON 17 |
| March 04, 2010 |
Slides |
Lockpicking Forensics
|
|
DEFCON 17 |
| March 04, 2010 |
Paper |
Lockpicking Forensics
|
|
DEFCON 17 |
| February 22, 2010 |
Video |
Tactical Fingerprinting Using Metadata, Hidden Info and Lost Data
|
Chema Alonso
Jose Palazon
|
DEFCON 17 |
| February 22, 2010 |
Audio |
Tactical Fingerprinting Using Metadata, Hidden Info and Lost Data
|
Chema Alonso
Jose Palazon
|
DEFCON 17 |
| February 22, 2010 |
Paper |
Tactical Fingerprinting Using Metadata, Hidden Info and Lost Data
|
Chema Alonso
Jose Palazon
|
DEFCON 17 |
| February 22, 2010 |
Slides |
Tactical Fingerprinting Using Metadata, Hidden Info and Lost Data
|
Chema Alonso
Jose Palazon
|
DEFCON 17 |
| February 19, 2010 |
Slides |
Practical information on the “cold boot” attack
|
Nadia Heninger
|
Confidence 2009 Warszawa |
| January 19, 2010 |
Video |
Advanced File System Hiding and Detection
|
Irby Thompson
Mathew Monroe
|
DEFCON 14 |
| January 19, 2010 |
Slides |
Advanced File System Hiding and Detection
|
Irby Thompson
Mathew Monroe
|
DEFCON 14 |
| January 19, 2010 |
Audio |
Advanced File System Hiding and Detection
|
Irby Thompson
Mathew Monroe
|
DEFCON 14 |
| January 17, 2010 |
Video |
Cyber-crime Foiled Once Again? Help prove the innocence or guilt of Jack Grove
|
Amber Schroader
Tyler Cohen
|
DEFCON 14 |
| January 17, 2010 |
Slides |
Cyber-crime Foiled Once Again? Help prove the innocence or guilt of Jack Grove
|
Amber Schroader
Tyler Cohen
|
DEFCON 14 |
| January 16, 2010 |
Audio |
Cyber-crime Foiled Once Again? Help prove the innocence or guilt of Jack Grove
|
Amber Schroader
Tyler Cohen
|
DEFCON 14 |
| January 10, 2010 |
Video |
Rebuilding HARD DRIVES for Data Recovery: Anatomy of a Hard Drive
|
Scott Moulton
|
DEFCON 14 |
| January 10, 2010 |
Audio |
Rebuilding HARD DRIVES for Data Recovery: Anatomy of a Hard Drive
|
Scott Moulton
|
DEFCON 14 |
| January 02, 2010 |
Slides |
Incident Handling and Log Analysis for Web Based Incidents
|
Manindra Kishore
|
ClubHack2009 |
| December 31, 2009 |
Slides |
Advance Computer Forensic concepts (windows)
|
Kush Wadhwa
|
ClubHack2009 |
| December 25, 2009 |
Video |
10 Ways To Not Get Caught Hacking On Your Mac
|
Charles Edge
|
DEFCON 14 |
| December 25, 2009 |
Slides |
10 Ways To Not Get Caught Hacking On Your Mac
|
Charles Edge
|
DEFCON 14 |
| December 25, 2009 |
Audio |
10 Ways To Not Get Caught Hacking On Your Mac
|
Charles Edge
|
DEFCON 14 |
| December 19, 2009 |
Audio |
When Tapes Go Missing
|
Robert Stoudt
|
DEFCON 15 |
| December 18, 2009 |
Audio |
Cool stuff learned from competing in the DC3 digital forensic challenge
|
David C. Smith
Mickey Laskey
|
DEFCON 15 |
| December 14, 2009 |
Audio |
Breaking Forensics Software: Weaknesses in Critical Evidence Collection
|
Chris Palmer
Alex Stamos
|
DEFCON 15 |
| December 13, 2009 |
Audio |
Windows Vista Log Forensics
|
Rich Murphey
|
DEFCON 15 |
| December 12, 2009 |
Audio |
Re-Animating Drives & Advanced Data Recovery
|
Scott Moulton
|
DEFCON 15 |
| November 28, 2009 |
Audio |
Analyzing Intrusions & Intruders
|
Sean M. Bodmer
|
DEFCON 15 |
| November 16, 2009 |
Audio |
Solid State Drives Destroy Forensic & Data Recovery Jobs: Animated!
|
Scott Moulton
|
DEFCON 16 |
| November 16, 2009 |
Audio |
Forensics is ONLY for Private Investigators
|
Scott Moulton
|
DEFCON 16 |
| November 15, 2009 |
Audio |
Developments in Cisco IOS Forensics
|
Felix 'FX' Lindner
|
DEFCON 16 |
| September 19, 2009 |
Slides |
Metasploit Autopsy: Reconstructing the Crime Scene
|
Peter Silberman
Steve Davis
|
Black Hat USA 2009 |
| September 19, 2009 |
Paper |
Metasploit Autopsy: Reconstructing the Crime Scene
|
Peter Silberman
Steve Davis
|
Black Hat USA 2009 |
| September 15, 2009 |
Slides |
Rapid Enterprise Triaging (RETRI): How to Run a Compromised Network and Keep Your Data Safe
|
Aaron LeMasters
Michael Murphy
|
Black Hat USA 2009 |
| September 15, 2009 |
Paper |
Rapid Enterprise Triaging (RETRI): How to Run a Compromised Network and Keep Your Data Safe
|
Aaron LeMasters
Michael Murphy
|
Black Hat USA 2009 |
| September 02, 2009 |
Slides |
Lockpicking Forensics
|
|
Black Hat USA 2009 |
| September 01, 2009 |
Paper |
Lockpicking Forensics
|
|
Black Hat USA 2009 |
| August 26, 2009 |
Slides |
Anti-Forensics: The Rootkit Connection
|
Bill Blunden
|
Black Hat USA 2009 |
| August 26, 2009 |
Paper |
Anti-Forensics: The Rootkit Connection
|
Bill Blunden
|
Black Hat USA 2009 |
| August 25, 2009 |
Paper |
Building a low cost, highly scalable, enterprise level computer forensics lab
|
Andrea Ghirardini
|
|
| July 30, 2009 |
Video |
When Tapes Go Missing
|
Robert Stoudt
|
DEFCON 15 |
| July 30, 2009 |
Slides |
When Tapes Go Missing
|
Robert Stoudt
|
DEFCON 15 |
| July 29, 2009 |
Video |
Cool stuff learned from competing in the DC3 digital forensic challenge
|
David C. Smith
Mickey Laskey
|
DEFCON 15 |
| July 29, 2009 |
Slides |
Cool stuff learned from competing in the DC3 digital forensic challenge
|
David C. Smith
Mickey Laskey
|
DEFCON 15 |
| July 08, 2009 |
Video |
Breaking Forensics Software: Weaknesses in Critical Evidence Collection
|
Chris Palmer
Alex Stamos
|
DEFCON 15 |
| July 08, 2009 |
Paper |
Breaking Forensics Software: Weaknesses in Critical Evidence Collection
|
Chris Palmer
Alex Stamos
|
DEFCON 15 |
| July 01, 2009 |
Video |
Windows Vista Log Forensics
|
Rich Murphey
|
DEFCON 15 |
| July 01, 2009 |
Slides |
Windows Vista Log Forensics
|
Rich Murphey
|
DEFCON 15 |
| June 29, 2009 |
Video |
Re-Animating Drives & Advanced Data Recovery
|
Scott Moulton
|
DEFCON 15 |
| June 29, 2009 |
Paper |
Re-Animating Drives & Advanced Data Recovery
|
Scott Moulton
|
DEFCON 15 |
| May 30, 2009 |
Video |
Analyzing Intrusions & Intruders
|
Sean M. Bodmer
|
DEFCON 15 |
| May 30, 2009 |
Slides |
Analyzing Intrusions & Intruders
|
Sean M. Bodmer
|
DEFCON 15 |
| May 29, 2009 |
Slides |
Ten Cool Things You Didn't Know About Your Hard Drive!
|
Scott Moulton
|
ShmooCon 2009 |
| May 07, 2009 |
Paper |
Tactical Fingerprinting Using Metadata, Hidden Info and Lost Data
|
|
Black Hat EU 2009 |
| May 06, 2009 |
Slides |
Tactical Fingerprinting Using Metadata, Hidden Info and Lost Data
|
|
Black Hat EU 2009 |
| April 09, 2009 |
Video |
Solid State Drives Destroy Forensic & Data Recovery Jobs: Animated!
|
Scott Moulton
|
DEFCON 16 |
| April 09, 2009 |
Video |
Forensics is ONLY for Private Investigators
|
Scott Moulton
|
DEFCON 16 |
| April 09, 2009 |
Slides |
Forensics is ONLY for Private Investigators
|
Scott Moulton
|
DEFCON 16 |
| April 08, 2009 |
Video |
Advanced memory forensics: The Cold Boot Attacks
|
Jacob Appelbaum
|
Chaos Communication Congress 25th (25C3) 2008 |
| April 08, 2009 |
Video |
Developments in Cisco IOS Forensics
|
Felix 'FX' Lindner
|
DEFCON 16 |
| April 08, 2009 |
Slides |
Developments in Cisco IOS Forensics
|
Felix 'FX' Lindner
|
DEFCON 16 |
| March 06, 2009 |
Paper |
iPhone Forensics
|
Andrew Hoog
|
|
| February 20, 2009 |
Slides |
Let Your Mach-O Fly
|
Vincenzo Iozzo
|
Black Hat DC 2009 |
| February 20, 2009 |
Paper |
Let Your Mach-O Fly
|
Vincenzo Iozzo
|
Black Hat DC 2009 |
| February 19, 2009 |
Paper |
SQL Server Anti-Forensics
|
Cesar Cerrudo
|
Black Hat DC 2009 |
| February 03, 2009 |
Paper |
Forensic Investigation of the Nintendo Wii: A First Glance
|
Benjamin Turnbull
|
|
| December 17, 2008 |
Slides |
Categorizer for Pictures
|
|
|
| December 17, 2008 |
Slides |
Forensic Analysis of Database Tampering
|
|
|
| November 04, 2008 |
Slides |
Raids - 13 Examples on how to Image Them
|
|
|
| November 04, 2008 |
Slides |
RAID Rebuilding
|
Daniel Dickerman
|
|
| July 12, 2008 |
Slides |
Forensic Image Analysis for Password Recovery
|
|
Shmoocon 2008 |
| May 15, 2008 |
Paper |
Sandman Project
|
|
|
| April 13, 2008 |
Slides |
Digital Evidence Standards
|
|
|
| April 13, 2008 |
Paper |
Hash Sets and Their Proper Construction
|
|
|
| April 13, 2008 |
Paper |
Traveling in time from past to future
|
|
|
| April 13, 2008 |
Paper |
Cryptography and Evidence
|
|
|
| April 13, 2008 |
Paper |
Reacting to Cyberintrusions: Technical, Legal and Ethical Issues
|
|
|
| April 13, 2008 |
Paper |
Intrusion Detection Systems and A View To Its Forensic Applications
|
|
|
| April 13, 2008 |
Paper |
Policies to Enhance Computer and Network Forensics
|
|
|
| April 13, 2008 |
Paper |
Software Forensics: Extending Authorship Analysis Techniques to Computer Programs
|
|
|
| April 13, 2008 |
Slides |
Computer Forensics in a LAN Environment
|
|
|
| April 13, 2008 |
Paper |
Forensic Engineering Techniques for VLSI, CAD tools
|
|
|
| April 13, 2008 |
Paper |
Forensic Readiness
|
|
|
| April 13, 2008 |
Paper |
Secure Audit Logs to Support Computer Forensics
|
Bruce Schneier
|
|
| April 13, 2008 |
Paper |
A Road Map for Digital Forensic Research
|
|
|
| April 13, 2008 |
Paper |
Searching and Seizing Computers and Obtaining Electronic Evidence in Criminal Investigations
|
|
|
| April 13, 2008 |
Slides |
Computer Forensics: Tool Testing & National Software Reference Library
|
|
|
| April 13, 2008 |
Paper |
A Guide to Electronic Crime Scene Investigation
|
|
|
| March 05, 2008 |
Paper |
A Picture's Worth: Digital Image Analysis
|
Neal Krawetz
|
Black Hat DC 2008 |
| March 05, 2008 |
Slides |
A Picture's Worth: Digital Image Analysis
|
Neal Krawetz
|
Black Hat DC 2008 |
| March 01, 2008 |
Paper |
Developments in Cisco IOS Forensics
|
Felix 'FX' Lindner
|
Black Hat DC 2008 |
| December 30, 2007 |
Slides |
Oracle Forensics: Collecting Evidence After an Attack
|
Aaron Newman
|
|
| December 30, 2007 |
Paper |
Oracle Database Forensics using Logminer
|
Paul Wright
|
|
| December 30, 2007 |
Paper |
Oracle Forensics in a Nutshell
|
Paul Wright
|
|
| December 29, 2007 |
Paper |
Oracle Forensics Part 1: Dissecting the Redo Logs
|
David Litchfield
|
|
| December 29, 2007 |
Paper |
Oracle Forensics Part 4: Live Response
|
David Litchfield
|
|
| December 29, 2007 |
Paper |
Oracle Forensics Part 3: Isolating Evidence of Attacks Against the Authentication Mechanism
|
David Litchfield
|
|
| December 29, 2007 |
Paper |
Oracle Forensics Part 5: Finding Evidence of Data Theft in the Absence of Auditing
|
David Litchfield
|
|
| December 29, 2007 |
Paper |
Oracle Forensics Part 6: Examining Undo Segments, Flashback and the Oracle Recycle Bin
|
David Litchfield
|
|
| December 29, 2007 |
Slides |
Oracle Forensics
|
Pete Finnigan
Aaron Newman
|
|