Resource Links

Computer crime forensics resources
AccessData	Known best for their Password Recovery Toolkit. AccessData's site offers information about this and other security related tools and you will find several free tools here. Also you will find several articles and links regarding cryptography and related subjects.
Digital Intelligence, Inc	Digital Intelligence designs and builds computer forensic software and hardware. They also offer free forensic utility software for law enforcement.
Fred Cohen & Associates (ForensiX)	This site is full of network security and information warfare articles and white papers. Fred Cohen is one of the most recognized, respected, and requested names in information protection today. Mr. Cohen has created a comprehensive forensic examination tool called ForensiX for the linux platform. Information about ForensiX.
Guidance Software	The creators of the popular GUI based Forensic tool EnCase. Besides information regarding their EnCase forensic tool there is a bulletin board with a number of forums relating to their products and computer forensics.
ILook's Home Page	ILook Image Investigator � is a forensic software tool. It is designed to allow an investigator to access the partition file system(s) on forensic images created by many of the best known forensic imaging systems.
Maresware - Danny Mares	Danny Mares has been authoring computer forensic tools for law enforcement for many years. This site provides access to all his tools as well as a number of articles and papers relating to computer foernsics. Information regarding Danny Mares computer forensic training can also be found here.
NTI - Computer Evidence Leaders	NTI has a comprehensive suite of comuter forensic tools which have been used by law enforcement for many years. There are also many very good articles concerning technical and legal issues surrounding computer forensics.
Sydex WWW Home Page	Recently bought by NTI, Inc. this is the home of one of the most used Imaging tools, Safeback. Also tools for imaging and analyzing diskettes, TeleDisk, AnaDisk, and CopyQM can be found here.
USSS&IACP Digital Evidence Best Practices.	The on-line verion of IACP & USSS's - Best Practices For Seizing Electronic Evidence booklet.
WetStone Technologies, Inc.	WetStone Technologies is a developer of Information Security Technologies. This site includes some excellent technical papers concerning Advancing Crime Sceen Computer Forensics, Time Lining Computer Evidence, Using SmarCards and Digital Signatures to Preserve Electronic Evidence among others.

Legal
U.S. Code Search	Search the United States Code - This database is a consolidation and codification by subject matter of the general and permanent laws of the United States. The Office of the Law Revision Counsel of the U.S. House of Representatives prepares and publishes the United States Code.
CCCIPS	Computer Crime and Intellectual Property Section (CCIPS) of the Criminal Division of DOJ. This site contains many articles and papers relating to the legal and policy issues surrounding computer crime. Among the many resources at this site is the Federal Guidlines for Searching and Seizing Computers.
Cornell Law School Legal Information Institute	A comprehensive source of state and federal laws. Not only are current federal and state laws available here but also recent court opinions and current legal studies.
Online Services List	A great resource!! This list is maintained by James Nerlinger, Jr and contains a variety of ISPs and similar information services, specifically, contacts at the legal departments for service of subpoenae, court orders, and search warrants.

Legal

U.S. Code Search

Search the United States Code - This database is a consolidation and codification by subject matter of the general and permanent laws of the United States. The Office of the Law Revision Counsel of the U.S. House of Representatives prepares and publishes the United States Code.

CCCIPS

Computer Crime and Intellectual Property Section (CCIPS) of the Criminal Division of DOJ. This site contains many articles and papers relating to the legal and policy issues surrounding computer crime. Among the many resources at this site is the Federal Guidlines for Searching and Seizing Computers.

Cornell Law School Legal Information Institute

A comprehensive source of state and federal laws. Not only are current federal and state laws available here but also recent court opinions and current legal studies.

Online Services List

A great resource!! This list is maintained by James Nerlinger, Jr and contains a variety of ISPs and similar information services, specifically, contacts at the legal departments for service of subpoenae, court orders, and search warrants.

Hardware

Hale's HIW: Partition Tables	All About Partition Tables and Sectors and FDISK - A very complete description of how partition tables work.
The PC Guide!	On outstanding resource! This site was created to be a comprehensive, general resource on IBM-compatible personal computers. You will find high-level descriptions of how a computer works, comprehensive technical information on the functioning various parts of a modern PC, detailed information on system care, protecting your system from viruses, and backups, both general and specific information on troubleshooting and repairing PCs, system optimization information that can help you easily get more from your existing machine, specific procedures for performing hardware and software tasks on your PC, references to many other hardware and software web pages.
Motherboard HomeWorld	This site provides up-to-date and relevant motherboard technology information including news, reviews, specifications, and tips.
Operating Systems Tutorial	An outstanding tutorial on the PC boot process.
The Tech Page, Hard Drive Jumpers and Specifications	The database at this site holds jumpers and specifications on thousands of hard drives from hundreds of manufacturers!
Technick.net	This site provides a huge list of cable, connector, and adapter pinouts with diagrams. A great resource when dealing with cables and connectors.
Complete illustrated Guide to the PC Hardware	This site is a great resource! An extremely comprehensive and detailed technical guide to Intel 86x based hardware and operating systems.
Western Digital Corporation's Technolgy Library	The Technology Library contains technology papers, installation guides, specification sheets, technical reference manuals, general information sheets, and more.
Wim's BIOS Page	Another great resource! This site has just about everything you want to know about the PC BIOS. Plus utilities and links to the major BIOS manufacturer sites.
Win98 Central	An excellent site for news, articles, reviews, and utilities for Windows98 and Intell base hardware.
WinDrivers.com	An outstanding source! Provides access to an extremely comprehensive list of current hardware drivers for your Win NT/9x systems. Including drivers for printers, cdroms, modems, sound cards, mice, monitors, etc. This site also has utility software, tech tips, and tutrials available.

Education
FLETC/Financial Fraud Institute	FLETC and the Financial Fraud Institue offer several extensive courses in both computer forensics and computer crime investigations.
HTCIA International	HTCIA is one of the primary sponsers of this symposium. HTCIA was created to encourage, promote, aid, and effect the voluntary interchange of data, information, experience, and knowledge about methods, processes regarding high tech crime. HTCIA offers many training seminars and symposiums to find out about them check out this web site.
IACIS	IACIS is an international volunteer non-profit corporation composed of law enforcement professionals dedicated to education in the field of forensic computer science. IACIS is dedicated to the education and certification of law enforcement professionals in the filed of computer forensic science.
NCTP: Training	The National Cybercrime Training Partnership (NCTP) currently offers training in Basic Data Recovery and Analysis. NCTP is also the sole authorized distributor of the "Cyber Crime Fighting Tape." You may obtain additional information on the tape and who may order the tape by accessing the hyperlink at the top of this page.
SEARCH Training	The SEARCH National Technical Assistance and Training Program provides comprehensive, hands-on training to local, state and federal agencies on computer technology issues with criminal justice applications, including several courses specific to computer crime and computer forensics.
The Institute of Police Technology & Management	The Institute of Police Technology and Management offers "The Computer Crime Investigations Course" a (CCIC-Level 1) this course is designed to train municipal, county, state and federal law enforcement investigators in the basics of computer crime investigation.

Education

FLETC/Financial Fraud Institute

FLETC and the Financial Fraud Institue offer several extensive courses in both computer forensics and computer crime investigations.

HTCIA International

HTCIA is one of the primary sponsers of this symposium. HTCIA was created to encourage, promote, aid, and effect the voluntary interchange of data, information, experience, and knowledge about methods, processes regarding high tech crime. HTCIA offers many training seminars and symposiums to find out about them check out this web site.

IACIS

IACIS is an international volunteer non-profit corporation composed of law enforcement professionals dedicated to education in the field of forensic computer science. IACIS is dedicated to the education and certification of law enforcement professionals in the filed of computer forensic science.

NCTP: Training

The National Cybercrime Training Partnership (NCTP) currently offers training in Basic Data Recovery and Analysis. NCTP is also the sole authorized distributor of the "Cyber Crime Fighting Tape." You may obtain additional information on the tape and who may order the tape by accessing the hyperlink at the top of this page.

SEARCH Training

The SEARCH National Technical Assistance and Training Program provides comprehensive, hands-on training to local, state and federal agencies on computer technology issues with criminal justice applications, including several courses specific to computer crime and computer forensics.

The Institute of Police Technology & Management

The Institute of Police Technology and Management offers "The Computer Crime Investigations Course" a (CCIC-Level 1) this course is designed to train municipal, county, state and federal law enforcement investigators in the basics of computer crime investigation.

Goverment & Law Enforcement
ATF
DOD's Computer Forensics Laboratory	Baltimore City PD
FBI's Washington Field Office Infrastructure Protection and Computer Intrusion Squad	Fairfax County, Va. PD
Federal Trade Commission	Maryland State Police
JUSTNET - National Law Enforcement and Corrections Technology Center	Metropolitan Police Department, Washington, DC
NSA	Montgomery County, MD PD
U.S. Customs Service	Prince George's County, MD PD
U.S. Postal Inspection Service	Richmond, Va. PD
United States Secret Service	Virginia State Police

Goverment & Law Enforcement

ATF

DOD's Computer Forensics Laboratory

Baltimore City PD

FBI's Washington Field Office Infrastructure Protection and Computer Intrusion Squad

Fairfax County, Va. PD

Federal Trade Commission

Maryland State Police

JUSTNET - National Law Enforcement and Corrections Technology Center

Metropolitan Police Department, Washington, DC

NSA

Montgomery County, MD PD

U.S. Customs Service

Prince George's County, MD PD

U.S. Postal Inspection Service

Richmond, Va. PD

United States Secret Service

Virginia State Police

Information Research
File Extensions	File extensions are often used to determine the program that created the file. While there is no guarantee users will not rename files and/or associate odd extensions with particular programs, this site lists some fairly standard associations.
What Is...every file format in the world	This is a list of file name extensions or suffixes that indicate the format or usage of a file and a brief description of that format.
Wotsit's Format	This site contains file format information, including header/foot signatures, on hundreds of different file types and all sorts of other useful programming information; algorithms, source code, specifications, etc.

Information Research

File Extensions

File extensions are often used to determine the program that created the file. While there is no guarantee users will not rename files and/or associate odd extensions with particular programs, this site lists some fairly standard associations.

What Is...every file format in the world

This is a list of file name extensions or suffixes that indicate the format or usage of a file and a brief description of that format.

Wotsit's Format

This site contains file format information, including header/foot signatures, on hundreds of different file types and all sorts of other useful programming information; algorithms, source code, specifications, etc.

Cryptography & Steganography
Counterpane Labs	An outstanding site about cryptography containing numerous technical papers about the subject. Free tools can also be found here. Counterpane Labs is the research arm of Counterpane Internet Security, Inc. Counterpane Internet Security, Inc. offers leading-edge expertise in the fields of 24x7 intrusion detection and prevention, preemptive threat discovery, forensic research, and organizational IT systems analysis.
Steganalysis - Attacks against Steganography and Watermarking - Countermeasures	An excellent site about Steganography and Steganalysis. Includes white papers on steganalysis and countermeasures among other things.

Cryptography & Steganography

Counterpane Labs

An outstanding site about cryptography containing numerous technical papers about the subject. Free tools can also be found here. Counterpane Labs is the research arm of Counterpane Internet Security, Inc. Counterpane Internet Security, Inc. offers leading-edge expertise in the fields of 24x7 intrusion detection and prevention, preemptive threat discovery, forensic research, and organizational IT systems analysis.

Steganalysis - Attacks against Steganography and Watermarking - Countermeasures

An excellent site about Steganography and Steganalysis. Includes white papers on steganalysis and countermeasures among other things.

Network & Information Security
AntiCode	A very comprehensive library of network exploits.
AntiOnline - Computer Security - Hacking & Hackers	This site is all about network security and hacking.
CERT� Coordination Center	CERT Coordination Center, studies Internet security vulnerabilities, provide incident response services to sites that have been the victims of attack, publishes a variety of security alerts, research security and survivability in wide-area-networked computing, and develop information to help you improve security at your site.
CIAC Security Website	Department of Energy's CIAC provides incident response services. This site contains many tools and much information regarding network security and intrusions.
CSI/FBI Computer Crime and Security Survey	The "Computer Crime and Security Survey" is conducted by CSI with the participation of the San Francisco Federal Bureau of Investigation (FBI) Computer Intrusion Squad. The aim of this effort is to help raise the level of security awareness as well as determine the scope of computer crime in the United States.
The Cyberlaw Encylopedia	A helpful catalog of cybercrimes with related information, case citations, and other resources.
ICSA 2000 - Library	A library or papers and information about network security.
Infowar	This is Winn Schwartau's site and is very comprehensive.
Information Warfare, I-War, IW, C4I, Cyberwar	This page will help you increase your understanding of information warfare - You will find a huge number of links to sites about all aspects of Information Warfare.
L0pht Heavy Industries	Creators of Back Orifice and L0phtCrack this site has several tools and lots security and hacker related information.
NIPC	The National Information Protection Center. The mission of the NIPC is both a national security and law enforcement effort to detect, deter, assess, warn of, respond to, and investigate computer intrusions and unlawful acts, both physical and "cyber," that threaten or target our critical infrastructure. You will find network security advisories, alerts, and warnings here as well as timely information on cyber vulnerabilities, hacker exploit scripts, hacker trends, virus information.
Rootshell	This site is filled with news, documentation, and code about network exploits.
SANS	SANS is a research and education organization where many system administrators, computer security professionals, and network administrators share information. SANS offers training, courses and newsletters on a variety of topics related to computer security.
SARC	An excellent site concerning computer viruses. At Symantec's Anti-Virus Research Center not only will you find a complete list and description of computer viruses and hoaxes here. You can conduct and on-line virus and security check as well. You will also find many excellent white papers on the subject of computer viruses.
2600: The Hacker Quarterly	The URL name says it all.

Network & Information Security

AntiCode

A very comprehensive library of network exploits.

AntiOnline - Computer Security - Hacking & Hackers

This site is all about network security and hacking.

CERT� Coordination Center

CERT Coordination Center, studies Internet security vulnerabilities, provide incident response services to sites that have been the victims of attack, publishes a variety of security alerts, research security and survivability in wide-area-networked computing, and develop information to help you improve security at your site.

CIAC Security Website

Department of Energy's CIAC provides incident response services. This site contains many tools and much information regarding network security and intrusions.

CSI/FBI Computer Crime and Security Survey

The "Computer Crime and Security Survey" is conducted by CSI with the participation of the San Francisco Federal Bureau of Investigation (FBI) Computer Intrusion Squad. The aim of this effort is to help raise the level of security awareness as well as determine the scope of computer crime in the United States.

The Cyberlaw Encylopedia

A helpful catalog of cybercrimes with related information, case citations, and other resources.

ICSA 2000 - Library

A library or papers and information about network security.

Infowar

This is Winn Schwartau's site and is very comprehensive.

Information Warfare, I-War, IW, C4I, Cyberwar

This page will help you increase your understanding of information warfare - You will find a huge number of links to sites about all aspects of Information Warfare.

L0pht Heavy Industries

Creators of Back Orifice and L0phtCrack this site has several tools and lots security and hacker related information.

NIPC

The National Information Protection Center. The mission of the NIPC is both a national security and law enforcement effort to detect, deter, assess, warn of, respond to, and investigate computer intrusions and unlawful acts, both physical and "cyber," that threaten or target our critical infrastructure. You will find network security advisories, alerts, and warnings here as well as timely information on cyber vulnerabilities, hacker exploit scripts, hacker trends, virus information.

Rootshell

This site is filled with news, documentation, and code about network exploits.

SANS

SANS is a research and education organization where many system administrators, computer security professionals, and network administrators share information. SANS offers training, courses and newsletters on a variety of topics related to computer security.

SARC

An excellent site concerning computer viruses. At Symantec's Anti-Virus Research Center not only will you find a complete list and description of computer viruses and hoaxes here. You can conduct and on-line virus and security check as well. You will also find many excellent white papers on the subject of computer viruses.

2600: The Hacker Quarterly

The URL name says it all.

Search engines & "whois"
Allwhois.com - Search any domain name in the world!	If a "whois" database does not exist for a particular domain name, a Root Name Server query will check the domain's availability
APNIC Whois Search	Search the Asia Pacific Whois Database
ARIN: Whois	SearcheARIN’s database to locate information on networks, autonomous system numbers (ASNs), network-related handles, and other related Points of Contact (POCs).
Deja.com	Search Usenet Newsgroups
Dogpile	The Dogpile metasearch interface takes a single query and processes it so that you will get the maximum benefit from your search. They currently support many of the webs most popular search tools.
Freeality Internet Search Engines	This site provides an interface to hundreds of Internet Search Engines.
The Internet Sleuth	This site is a collection of over 900 searchable databases on the Internet on a wide variety of subjects
NIPRNET	Search the DOD Whois Database
Ripe Whois	Search the European Whois Database
SamSpade.org	This site takes a hostname or an IP address, guesses at the domain name, and then runs some whois queries to find out who owns the domain and the block of IP addresses it lives in, and traces the route packets take to the host.
The Ultimates	Here you can search resources from all over the net like phone books, email directories, and trip planners. But this isn't just another list of links. The form for each resource is integrated into the site, and Javascript copies the information from one blank to another so you can use everything out there with a minimum of time and effort.

Search engines & "whois"

Allwhois.com - Search any domain name in the world!

If a "whois" database does not exist for a particular domain name, a Root Name Server query will check the domain's availability

APNIC Whois Search

Search the Asia Pacific Whois Database

ARIN: Whois

SearcheARIN’s database to locate information on networks, autonomous system numbers (ASNs), network-related handles, and other related Points of Contact (POCs).

Deja.com

Search Usenet Newsgroups

Dogpile

The Dogpile metasearch interface takes a single query and processes it so that you will get the maximum benefit from your search. They currently support many of the webs most popular search tools.

Freeality Internet Search Engines

This site provides an interface to hundreds of Internet Search Engines.

The Internet Sleuth

This site is a collection of over 900 searchable databases on the Internet on a wide variety of subjects

NIPRNET

Search the DOD Whois Database

Ripe Whois

Search the European Whois Database

SamSpade.org

This site takes a hostname or an IP address, guesses at the domain name, and then runs some whois queries to find out who owns the domain and the block of IP addresses it lives in, and traces the route packets take to the host.

The Ultimates

Here you can search resources from all over the net like phone books, email directories, and trip planners. But this isn't just another list of links. The form for each resource is integrated into the site, and Javascript copies the information from one blank to another so you can use everything out there with a minimum of time and effort.

Web-based internet tools
Multiple Ping Reply	Web based ping tool
Multiple Tracerout Reply	Web Based tracerout tool
Network Group Services	This site allows you to ping or traceroute to hosts on other networks.
Nslookup Gateway	Nslookup is used to find the physical IP address where the domain name resides
Web Anonymizer	Provides its users the ability to surf the web in a private and anonymous fashion

Web-based internet tools

Multiple Ping Reply

Web based ping tool

Multiple Tracerout Reply

Web Based tracerout tool

Network Group Services

This site allows you to ping or traceroute to hosts on other networks.

Nslookup Gateway

Nslookup is used to find the physical IP address where the domain name resides

Web Anonymizer

Provides its users the ability to surf the web in a private and anonymous fashion

Linux
LinuxWorld	LinuxWorld is a Web-only magazine that provides news and technical information about Linux and open source software
Linux Documentation Project	The Linux Documentation Project is working on developing free, high quality documentation for the GNU/Linux operating system. The overall goal of the LDP is to collaborate in all of the issues of Linux documentation. This includes the creation of "HOWTOs" and "Guides". We hope to establish a system of documentation for Linux that will be easy to use and search.
REDHAT.COM -- Serving the Linux and Open Source Communities	Home of one of the most popular Linux distribution. Much information on Linux can be found here. Also Red Hat's Training and Certification information is available here.

Linux

LinuxWorld

LinuxWorld is a Web-only magazine that provides news and technical information about Linux and open source software

Linux Documentation Project

The Linux Documentation Project is working on developing free, high quality documentation for the GNU/Linux operating system. The overall goal of the LDP is to collaborate in all of the issues of Linux documentation. This includes the creation of "HOWTOs" and "Guides". We hope to establish a system of documentation for Linux that will be easy to use and search.

REDHAT.COM -- Serving the Linux and Open Source Communities

Home of one of the most popular Linux distribution. Much information on Linux can be found here. Also Red Hat's Training and Certification information is available here.

Computer crime forensics resources

Home