<br /> Digital<br /> The Quarterly Magazine for Digital Forensics Practitioners<br /> ForensicS ISSUE 01<br /> / magazine<br /> INSIDE Competition!<br /> / Detailed Forensic Examination Procedures Win an Archos 405<br /> / How secure is your personal data? Portable Media Player<br /> / Expert Witness Advice<br /> / Facebook Forensics<br /> Tool Development<br /> THE WEB<br /> HOW MUCH DO WE REALLY KNOW?<br /> Blow by blow network analysis on Web requests<br /> 01<br /> By Tim Watson<br /> 9 772042 061097<br /> Issue 1 TR Media<br /> / Starting out / LATEST News / Book Reviews / Special Offer<br /> A beginners guide WINDOWS 7 LAUNCHES Real Digital Forensics 20% off Oxygen<br /> to digital forensics THE ITC WORKSHO<a title="DFM-Issue1 page 1" href="http://viewer.zmags.com/publication/09440126?page=1"> Digital The Quarterly Magazine for Digital Fore</a> <a title="DFM-Issue1 page 2" href="http://viewer.zmags.com/publication/09440126?page=2"> We are pleased to offer the following exciting co</a> <a title="DFM-Issue1 page 3" href="http://viewer.zmags.com/publication/09440126?page=3"> EDITORIAL Welcome to the first issue of TDigital </a> <a title="DFM-Issue1 page 4" href="http://viewer.zmags.com/publication/09440126?page=4"> </a> <a title="DFM-Issue1 page 5" href="http://viewer.zmags.com/publication/09440126?page=5"> / CONTENTS CONTENTS / DIGITAL FORENSICS MAGAZ</a> <a title="DFM-Issue1 page 6" href="http://viewer.zmags.com/publication/09440126?page=6"> / NEWS NEWS Microsoft Windows 7 Ships </a> <a title="DFM-Issue1 page 7" href="http://viewer.zmags.com/publication/09440126?page=7"> workshop was to explore ways in which all these g</a> <a title="DFM-Issue1 page 8" href="http://viewer.zmags.com/publication/09440126?page=8"> / LEAD FEATURE ANATOMY OF A WEB REQUEST The Pr</a> <a title="DFM-Issue1 page 9" href="http://viewer.zmags.com/publication/09440126?page=9"> around the world to retrieve files on its behalf.</a> <a title="DFM-Issue1 page 10" href="http://viewer.zmags.com/publication/09440126?page=10"> / LEAD FEATURE Frame header (MAC addresses</a> <a title="DFM-Issue1 page 11" href="http://viewer.zmags.com/publication/09440126?page=11"> Frame 1 (82 bytes on wire, 82 bytes captured) Eth</a> <a title="DFM-Issue1 page 12" href="http://viewer.zmags.com/publication/09440126?page=12"> / LEAD FEATURE IP = 146.277.150.</a> <a title="DFM-Issue1 page 13" href="http://viewer.zmags.com/publication/09440126?page=13"> / Pharming and Phishing Get more information on u</a> <a title="DFM-Issue1 page 14" href="http://viewer.zmags.com/publication/09440126?page=14"> / COMPETITION COMPETITION / WIn an Archos 405 </a> <a title="DFM-Issue1 page 15" href="http://viewer.zmags.com/publication/09440126?page=15"> / FEATURE DATA ERASURE – FACT OR FICTION? Don</a> <a title="DFM-Issue1 page 16" href="http://viewer.zmags.com/publication/09440126?page=16"> / FEATURE it of course because the index has </a> <a title="DFM-Issue1 page 17" href="http://viewer.zmags.com/publication/09440126?page=17"> it further? Another Linux command that we can run</a> <a title="DFM-Issue1 page 18" href="http://viewer.zmags.com/publication/09440126?page=18"> / FEATURE The `v’option tells shred that</a> <a title="DFM-Issue1 page 19" href="http://viewer.zmags.com/publication/09440126?page=19"> erased. As we have no way to address it, we can n</a> <a title="DFM-Issue1 page 20" href="http://viewer.zmags.com/publication/09440126?page=20"> </a> <a title="DFM-Issue1 page 21" href="http://viewer.zmags.com/publication/09440126?page=21"> / FEATURE FORENSIC EXAMINATION OF A COMPUTER S</a> <a title="DFM-Issue1 page 22" href="http://viewer.zmags.com/publication/09440126?page=22"> / FEATURE of contingency planning) provides a</a> <a title="DFM-Issue1 page 23" href="http://viewer.zmags.com/publication/09440126?page=23"> picions of the subject become public knowledge, t</a> <a title="DFM-Issue1 page 24" href="http://viewer.zmags.com/publication/09440126?page=24"> / FEATURE • Start recording the chain of cust</a> <a title="DFM-Issue1 page 25" href="http://viewer.zmags.com/publication/09440126?page=25"> / Further information The US Department of Justic</a> <a title="DFM-Issue1 page 26" href="http://viewer.zmags.com/publication/09440126?page=26"> / FEATURE • Replace the evidential image in t</a> <a title="DFM-Issue1 page 27" href="http://viewer.zmags.com/publication/09440126?page=27"> </a> <a title="DFM-Issue1 page 28" href="http://viewer.zmags.com/publication/09440126?page=28"> / FUTURE ISSUES 2 GREAT REASONS TO SUBSCRIBE I</a> <a title="DFM-Issue1 page 29" href="http://viewer.zmags.com/publication/09440126?page=29"> / LEGAL EDITORIAL LEGAL EDITORIAL Ahoy there, </a> <a title="DFM-Issue1 page 30" href="http://viewer.zmags.com/publication/09440126?page=30"> / LEGAL FEATURE thE WILyWItnEss Key Legal Iss</a> <a title="DFM-Issue1 page 31" href="http://viewer.zmags.com/publication/09440126?page=31"> opment languages, programming models, and system </a> <a title="DFM-Issue1 page 32" href="http://viewer.zmags.com/publication/09440126?page=32"> / LEGAL FEATURE / USEFUL RESOURCES Youcanlearnmu</a> <a title="DFM-Issue1 page 33" href="http://viewer.zmags.com/publication/09440126?page=33"> BLADE F O R E N S I C D AT A R E C O V E RY </a> <a title="DFM-Issue1 page 34" href="http://viewer.zmags.com/publication/09440126?page=34"> / LEGAL FEATURE DISCLOSE OR DISPOSE? Companies</a> <a title="DFM-Issue1 page 35" href="http://viewer.zmags.com/publication/09440126?page=35"> / Rule 26(f) The “meet and confer” requirement in</a> <a title="DFM-Issue1 page 36" href="http://viewer.zmags.com/publication/09440126?page=36"> / TECH FEATURE TRYhe Diary OF A PDFBOOK A Tool</a> <a title="DFM-Issue1 page 37" href="http://viewer.zmags.com/publication/09440126?page=37"> Day Nine Looks like the stories on your wall are </a> <a title="DFM-Issue1 page 38" href="http://viewer.zmags.com/publication/09440126?page=38"> Digital ForensicS / magazine Digital Forensics m</a> <a title="DFM-Issue1 page 39" href="http://viewer.zmags.com/publication/09440126?page=39"> / BACKUP TAPE FORENSICS BACKUPTAPE FORENSICS I</a> <a title="DFM-Issue1 page 40" href="http://viewer.zmags.com/publication/09440126?page=40"> / BACKUP TAPE FORENSICS despite the company’s</a> <a title="DFM-Issue1 page 41" href="http://viewer.zmags.com/publication/09440126?page=41"> backup tape software to restore the information o</a> <a title="DFM-Issue1 page 42" href="http://viewer.zmags.com/publication/09440126?page=42"> / BACKUP TAPE FORENSICS purchased tape of the</a> <a title="DFM-Issue1 page 43" href="http://viewer.zmags.com/publication/09440126?page=43"> / FEATURE BRIEF INTRODUCTION TO COUNTER-FORENS</a> <a title="DFM-Issue1 page 44" href="http://viewer.zmags.com/publication/09440126?page=44"> / FEATURE towards removing data from Windows </a> <a title="DFM-Issue1 page 45" href="http://viewer.zmags.com/publication/09440126?page=45"> / Anti-Forensics and Counter-Forensics “Anti-f</a> <a title="DFM-Issue1 page 46" href="http://viewer.zmags.com/publication/09440126?page=46"> / FEATURE remaining 3 kilobytes will contain </a> <a title="DFM-Issue1 page 47" href="http://viewer.zmags.com/publication/09440126?page=47"> / IN THE NEXT ISSUE COMING SOON… In the nex</a> <a title="DFM-Issue1 page 48" href="http://viewer.zmags.com/publication/09440126?page=48"> / BOOK REVIEWS BOOK REVIEWS Real Digital Fo</a> <a title="DFM-Issue1 page 49" href="http://viewer.zmags.com/publication/09440126?page=49"> The authors do a great job of stepping throu</a> <a title="DFM-Issue1 page 50" href="http://viewer.zmags.com/publication/09440126?page=50"> / LETTERS 360° OFeedback, commentary, industry go</a> <a title="DFM-Issue1 page 51" href="http://viewer.zmags.com/publication/09440126?page=51"> Now Available! Cutting Edge Content in Digital S</a> <a title="DFM-Issue1 page 52" href="http://viewer.zmags.com/publication/09440126?page=52"> Memory and the ability to retain in</a>