Computer Forensic Analysis

Computer forensics is yet another computer security topic that is being covered in a long-lasting collaboration between computer security researchers Dan Farmer (Elemental) and Wietse Venema (IBM).

Forensic Discovery
We finally made it: the book is finished and can be ordered from your favorite book shop.
The Coroner's Toolkit (TCT)
Forensics software that can be used for a post-mortem analysis of a UNIX system after break-in.
Computer Forensics Column
On-line copies of Dan and Wietse's column series for the Doctor Dobb's Journal.
Computer Forensics Class Handouts
Handouts for Dan and Wietse's free class on computer forensic analysis of August 1999.

Earlier results of this unique collaboration were the paper Improving the Security of Your Site by Breaking Into It (1993), the SATAN tool (1995), and a Computer Security Auditing class (1996).