Washington State HTCIA: Resources

The member forums provide the capability to post and view information on a variety of topics. Find the hardware you need to restore seized backup tapes, or discover how to extract artifacts relevant to the latest P2P file sharing program. All information is indexed and searchable. Members will receive the password once their application is approved. If you are a member of another HTCIA chapter and wish to participate in the forums, email the Chapter President.

Member Forums It is our goal to make this list one of the most comprehensive possible for those involved in the relevant fields of expertise. This being said, the list is a work in progress. If you have a resource you would like to see listed, please contact the chapter President. The Washington State HTCIA does not necessarily endorse of approve of all the information you will find on the sites listed.

Please report dead links and send your suggestions for resources to

Recommended by members


ASSOCIATIONS/ORGANIZATIONS
Association Of Certified Fraud Examiners	An international, 25,000-member professional organization dedicated to fighting fraud and white-collar crime. With offices in North America and chapters around the globe, the Association is networked to respond to the needs of anti-fraud professionals everywhere.

Department of Defense Cyber Crime Center (DC3)	Created as a DoD center of excellence to efficiently organize, equip, train, and employ scarce resources to more effectively address the proliferation of computer crimes affecting the DOD

FBI Computer Analysis and Response Team (CART)	Provides assistance to FBI field offices in the search and seizure of computer evidence as well as forensic examinations and technical support for FBI investigations.

High Tech Crime Consortium (HTCC)	An excellent group to become a member of. Members receive access to a library of information and can participate in dialogs with law enforcement and forensic professionals worldwide.

HTCIA	Listing of all HTCIA chapters.

InfraGard	A Federal Bureau of Investigation (FBI) program that gains support from the information technology industry and academia for the FBI’s investigative efforts in the cyber arena.

Internet Crime Complaint Center	The Internet Crime Complaint Center (IC3) is a partnership between the Federal Bureau of Investigation (FBI) and the National White Collar Crime Center (NW3C). IC3's mission is to serve as a vehicle to receive, develop, and refer criminal complaints regarding the rapidly expanding arena of cyber crime.

WEBSITES/LINK LISTS
Computer Forensics Links & White papers	A comprehensive resource for many aspects of digital forensics and things related.

Center For Democracy Legislative Information	Information on various Bills and laws affecting the Internet and related topics. Very infomative and up to date.

Dave Dittrich's Computer Forensics Links	Another decent list of links.

E-Evidence Information Center	Well maintained and kept current. One of the best resources in existence for many aspects of digital forensics and things related. This is a site you must visit. If you need information on it, you'll probably find it here.

Forensic Focus	Well laid out and designed site with an abundance of information conerning the digital forensics profession.

Forensics Links	Another decent list of links.

GCK's Cyberforensics URLs	A good list of links on multiple subjects and areas related to digital forensics.

Geschonneck.com	List of links related to information security and digital forensics.

DIRECTORIES
Anywho	Reverse telephone directory.

Internet Address Finder	This is one of the most comprehensive free People Search & Yellow Pages portal on the Web.

Military Locator Service	Is your missing person in the armed services? This database can help.

SEC Filings	SEC searches give you detailed information on companies that trade their stock on the stock exchange. You'll get detailed reports about publicly traded companies.

Switchboard	Free surname searches, address, and telephone number criss-cross lookups. Switchboard is a free national telephone crisscross directory you can use to locate people or businesses. You can use it as a conventional telephone lookup or use it to conduct surname searches. That is, input a first and last name and obtain a list of everyone in the country with the same name.

LEGAL WEBSITES
Berkman Center for Internet & Society	Good resource for information on Electronic Discovery and related matters.

Find Law	State government and state laws that can be accessed on the net. Includes state statues, local county and city. US Government information sources.

The Legal Information Institute	Supreme Court opinions under the auspices of Project Hermes, the court's electronic-dissemination project. This archive contains (or will soon contain) all opinions of the court issued since May of 1990.

Kroll Ontrack Legal Resources	One of the best resources on the Internet for legal information and advice on a variety of topics such as Antitrust Investigations, Document Retention and Electronic Discovery.

SOFTWARE/HARDWARE
Data Carving/Tool Suites: DataLifter	A great set of tools at a fantastic price. The carving capability will find evidence that some other tools do not.

Electronic Discovery: Attenex Products	Several E-Discovery software packages.

Media Wiping/Sanitizing Tool: Sterilize	Sterilize provides the capability to wipe the media to be used as examination / working copies, perform a checksum on the media, and then visually verify that the media is void of all data. All of the steps can be automatically documented within a report file. Compliant with the DOD 5220.22-M, NAVSO P5239-26, RCMP TSSIT97e OPS-II, AFSSI-5020, and AR380-19 standards for clearing, purging, and sanitizing media.

Media Wiping/Sanitizing Tool: Disk Drive Secure Erase	Securely erase all data on ATA disk drives in Intel architecture computers. Four drive erase choices are provided.

ReadNotify	ReadNotify is an email tracking service. Tells you when email you sent gets read / re-opened / forwarded and more.

Website Capturing/Crawling: HTTrack	Download a Website to a local directory, building recursively all directories, getting HTML, images, and other files from the server to your computer. HTTrack arranges the original site's relative link-structure.

Website Capturing/Crawling: SamSpade	A Swiss Army Knife collection of tools, including a Website download feature. You've got to have this one.

TRAINING
AccessData	Training in many areas of digital forensics. Creators of Forensic ToolKit and other forensic software commonly used for digital forensic analysis.

BlackBag Technologies, Inc.	Provides training and hardware and software tools to the law enforcement and private sector forensic communities. The place to go for training on MAC's.

CyberSecurity Institute	Provides forensic training throughout the Pacific Northwest. HTCIA members receive 20% on all CSI sponsored training events. The President/CEO, Steve Hailey, is currently the Washington State HTCIA Chapter President.

Edmonds Community College	Degree and Certificate programs in information security and digital forensics.

Guidance Software	Creators of the EnCase forensic software commonly used for digital forensic analysis.

IACIS	An international volunteer non-profit corporation composed of law enforcement professionals dedicated to education in the field of forensic computer science.

Internet Safety Training	Excellent presentation materials for teaching Internet safety to various age groups.

National White Collar Crime Center (NW3C)	Provides no-cost digital forensics training for members of law enforcement.

Mobile Forensics Training	Provides a hands-on Mobile Forensics Workshop here in the United States and Canada.

Paraben	Great forensic software and training. Fundamental forensics to cell phone and PDA forensic training.

SEARCH	Offers training courses designed to teach high-tech investigators the skills they need to stay ahead of criminals in the fight against crime. Officers new to Internet and computer forensic investigations, as well as advanced digital media investigators, will benefit from their leading-edge curriculum.

WHITE PAPERS/ARTICLES
Anti-Forensics: Defeating Forensic Analysis of Unix	Techniques to defeat forensic analysis of a UNIX system

Anti-Forensics: The Metasploit Project	Multiple anti-forensic tools, articles, and a blog.

Berkman Center for Internet & Society	Good resource for informaiton on Electronic Discovery and related matters.

Bitpipe Network Forensics	Several documents related to network forensics and associated topics. Good paper on log management to help your organization comply with legislation such as Sarbanes.

Computer Forensics Resource Center	Good articles related to Electronic Discovery.

Craig Ball's List of Helpful Links	Craig is an attorney who also performs forensic analysis. His papers and articles are well worth the read.

DataSek UK Limited	Short articles on Electronic Discovery and other topics such as email.

Daticon	Good articles related to Electronic Discovery.

Digital Forensic Research Workshop	Good papers, especially for the digital forensic educator. The Digital Forensic Research Workshop (DFRWS) was brings academic researchers and digital forensic investigators and practitioners together for discussions related to digital forensics.

Cyber-Safety For Everyone	Adults, children, parents, grandparents, teachers, office-workers: we all face a new area of danger – the Internet. This booklet reviews the dangers that people can meet on the Internet and then examine some of the technology that is helpful in preventing harm.

FirstGov Computer Forensic Search	A plethoria of information on computer forensics from the FBI, NIST, and other government agenices.

Open Source Software As A Mechanism To Assess Reliability For Digital Evidence	A great article on the use of open source software and reliability standards for digital forensic analysis. Good information on the Hearsay Rule and the Business Record Exception. The links at the top of the page do not work, but the information can be found by searching the doucment with your browser.

How to find E-mail addresses

Lexis Nexis Law Library	Great white papers section for information on a variety of legal and technical topics, including how to prepare for an electronic discovery response, and how to use meta data to bolster your case. The Case Summaries section provides a list of representative cases from around the country that address electronic discovery, including evidentiary issues, cost allocation, electronic evidence spoliation,and formatting of electronic evidence.

Log Analysis: IDS Logs in Forensics Investigations	Good introduction on reading IDS (Intrusion Detection System) logs. Much of this information is covered in the Packet Analysis class that will be hosted by the WA HTCIA in 2006.

Network Forensics: Cisco Router	Good introductory information on what type of information can be gleaned from a Cisco router.

The Tools Proven In Court Question	Does your choice of forensic tools determine admissibility of evidence?

Windows: File Caching	Excellent article on how file caching works with the Windows OS'es.

Windows: NTFS Time and Date Stamps	Describes how file and folder date and time stamps (created or modified) are displayed within NTFS.

Unlocking, Discovering and Using Digital Evidence	A compilation of articles related to electronic discovery and dealing with motions and requests for evidence from opposing parties. Sample interrogatories and preservation letters are included. This is a great resource.

MISCELLANEOUS