Windows Forensics: The Field Guide for Corporate Computer Investigations

Refer to the following list for additional resources:

• AnaDisk (from NTI)

  • http://www.forensics-intl.com/anadisk.html

• FastBloc Write Blocker From Guidance Software

  • http://www.guidancesoftware.com/products/FastBloc/index.shtm

• GetSlack (from NTI)

  • http://www.forensics-intl.com/getslack.html

• ISO9660 Details

  • http://www.alumnus.caltech.edu/~pje/iso9660.html?the_id=34

• Kroll OnTrack

  • http://www.krollontrack.com

• Microsoft Windows History

  • http://www.microsoft.com/windows/WinHistoryDesktop.mspx

• MTF Tape Format

  • http://www. layton -graphics.com/mtf/MTF_100a.PDF

• Nortek Hard Disk Password Recovery

  • http://www.nortek.on.ca/

• Slammer Worm Analysis

  • http://www.computer.org/security/v1n4/j4wea.htm

• Ultrablock Write Blocker From Digital Intelligence

  • http://www.digitalintel.com/ultrablock.htm

• Vogon International Hard Disk Password Recovery

  • http://www.vogon-international.com