MGS410/610 Course Website
Digital Forensics

• Course Syllabus
• Course Syllabus in Microsoft Word format
• Course Learning Goals
• Academic Integrity Standards and Disciplinary Procedures
• School of Management Undergraduate Handbook
• School of Management Graduate Handbook
• Classroom Conduct
• Absences
• Incomplete Grades
• UB Virtual Computing Lab
• How do I get the free Microsoft software from UB?
• How do I manage various settings on my UB email account?
• How do I access my S: drive from an off-campus computer?

UBLearns

Course Grades

Lecture Notes
• Chapter 1
• Chapter 2
• Chapter 3
• Chapter 4
• Chapter 5
• Chapter 8
• Chapter 9
• Chapter 10
• Chapter 11

Homework
• Homework 1 - 10 points
• Homework 2 - 5 points
• Homework 3 - 10 points
• Homework 4 - 10 points
• Homework 5 - 10 points
• Homework 6 - 20 points
• Email Tracing Exercise - Not for credit

Links
• The Best Digital Forensics Tool
• Tracking the Craigslist Killer
• Investigating a Stolen Laptop
• Forensics Wiki
• Free Forensics Software
• FBI and Cybercrime
• Fourth Amendment to the US Constitution
• US Bill of Rights
• DOJ - Investigations Involving the Internet and Computer Networks
• American Society of Crime Laboratory Directors
• FRED Forensic Systems
• Computer Forensics - Not As Seen on TV
• Hard Drives 101
• The Urban Legend of Multipass Hard Disk Overwrite
• Center for Magnetic Recording Research
• Sanitizing Solid State Drives
• Digital Evidence Discrepancies - Casey Anthony Trial
• Casey Anthony Digital Evidence - Chloroform Searches
• Valid Conclusions?
• Mork keeps on giving: When the database worms eat into your murder trial
• SSD Flash Hard Drives Shmoocon Presentation
• Learning About Solid State Drives
• Peter Gutmann Discusses SSD Forensics
• Solid State Drives: The Beginning of the End for Current Practice in Digital Forensic Recovery?
• Intro to Report Writing for Digital Forensics
• Report Writing - Summarized in a tweet
• OWADE
• UB Record Retention and Disposal Policy
• UB Record Retention Schedules
• UB Record Coordinators Chart
• Access Data Registry Quick Find Chart
• Overview of Ceglia v. Facebook Lawsuit
• Facebook's Smoking Gun Claim
• Ceglia's Planted Evidence Claim
• Federal Complaint against Ceglia
• Anti-Forensics Presentation at DerbyCon
• VMware Player
• VMware Appliances
• VirtualBox
• Firefox EXIF Viewer Add-on
• Online EXIF Viewer
• Displaying Full Email Headers
• Interpreting Email Headers
• Analyzing a Spam Email Header
• Regular Email Header versus Spam Header
• Email Tampering
• Earliest Documented Case of Data Theft
• The Four Stages of NTFS File Growth
• How NTFS Works
• DARPA Shredder Challenge
• SANS Investigate Forensic Toolkit (SIFT) Workstation
• Useful forensic utilities
• The Volatility Framework
• Pulling Passwords from a Memory Dump
• Analyzing a Stuxnet Memory Dump
• Stuxnet Memory Analysis
• Open Source Digital Forensics Tools: The Legal Argument
• guymager - Free Forensic Imaging Tool
• How Google Destroys Hard Drives
• Windows executable walkthrough
• Virus Total Online Scanner
• Free Malware Analysis Service
• Microsoft Disk2vhd
• Internal Investigation
• Forensic investigation reveals employee watching cat videos
• Software Error in Casey Anthony Trial
• 5 Daunting Problems Facing EDiscovery
• Ceglia v. Facebook Motion to Dismiss
• Digital Corpora - Downloadable examples
• Digital Detectives
• Microsoft Digital Crimes Unit
• OpenLV
• Missing IRS emails
• Mac OS X Auditor
• Investigating with Google
• What Every Businessperson Should Know About E-Discovery
• Using PowerShell to find USB history
• Trusting your Tools

Please e-mail me if you have any questions, comments or suggestions regarding this website.