Re: Questions concerning computer forensics

["Jaymz Ringler" <jringler () sperrytv com>]

FIRE is a must!!!!!
forensic incident responce environment.  

bootable cd with excellent selection of tools designed for forensic 
investigation of suspect machines.  

the home site is:    http://fire.dmzs.com

Also, if you want more info on fire check this out...

Sans had a web-seminar on FIRE.   
http://www.sans.org/webcasts/050703.php








-----Original Message-----
From: "Joe Lindsay" <josephlindsay11182 () hotmail com>
To: security-basics () securityfocus com
Date: Tue, 24 Jun 2003 13:38:47 -0400
Subject: Questions concerning computer forensics

> I am currently a senior in college and I am looking to go into
> computer 
> forensics.  Right now i am currently teaching myself some of the
> tehniques 
> used in doing Win2k and some *nix investigation.  I am a computer
> science 
> and information systems major.  I just have some questions about
> computer 
> forensics in general.
>
> 1.  How closely related are computer forensics and security?
>
> 2.  I have done palm programming, and I read an article about palms
> being 
> used to prosecute.  Is there a growing need for palm forensics?
>
> 3.  I have some tools, but they are from sourceforge.  Are there any 
> freeware or trialware available for Win2k machine(sadly been unable
> to get 
> linux installed, tried many different distros :-<)?
>
> 4.  I am currently reading Computer Forensics:  Incident Response
> Essentials 
> by Warren Kruse and Jay Heiser, are there any other books and/or
> whitepapers 
> that anyone can suggest?
>
> 5.  Is there a growing need for computer forensics in the work place?
>  Does 
> the security analyst or consultant double up as computer forensic
> analyst or 
> security investigator?
>
> Thank you for your time,
>
> Joe Lindsay
>
> _________________________________________________________________
> The new MSN 8: smart spam protection and 2 months FREE*  
> http://join.msn.com/?page=features/junkmail
>
>
> ---------------------------------------------------------------------
> ------
> Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top
> analysts!
> The Gartner Group just put Neoteris in the top of its Magic Quadrant,
> while InStat has confirmed Neoteris as the leader in marketshare.
>      
> Find out why, and see how you can get plug-n-play secure remote
> access in
> about an hour, with no client, server changes, or ongoing
> maintenance.
>           
> Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
> ---------------------------------------------------------------------
> -------



---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------