Windows Forensics: The Field Guide for Corporate Computer Investigations

Refer to the following list for additional resources:

• Access Data Forensic Toolkit

  • http://www. accessdata .com/Product04_Overview.htm?ProductNum=04

• Computer Emergency Response Team (CERT)

  • http://www.cert.org

• Cygwin Linux-like Environment

  • http://www.cygwin.org

• Guidance Software ( makers of EnCase)

  • http://www.encase.com

• Infragard

  • http://www.infragard.net

• High Tech Crime Investigation Association

  • http://www.htcia.org

• Microsoft Virtual PC

  • http://www.microsoft.com/ windows /virtualpc/default.mspx

• NTI (makers of SafeBack)

  • http://www.forensics-intl.com

• NIST Computer Security Division

  • http://www.csrc.nist.gov

• SANS

  • http://www.sans.org

• SysInternals

  • http://www.sysinternals.com

• VMWare

  • http://www.vmware.com

• WinHex

  • http://www.winhex.com