http://www.forensicswiki.org/w/index.php?title=Online_resources&feed=atom&action=history 2013-05-24T15:30:16Z Revision history for this page on the wiki MediaWiki 1.20.3 http://www.forensicswiki.org/w/index.php?title=Online_resources&diff=5967&oldid=prev 2007-04-21T12:41:58Z

<p>Added Sam Spade</p> <table class='diff diff-contentalign-left'> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;'> <td colspan='2' style="background-color: white; color:black;">← Older revision</td> <td colspan='2' style="background-color: white; color:black;">Revision as of 12:41, 21 April 2007</td> </tr><tr><td colspan="2" class="diff-lineno">Line 6:</td> <td colspan="2" class="diff-lineno">Line 6:</td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://whois-search.com/ WHOIS-Search.com]</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://whois-search.com/ WHOIS-Search.com]</div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">The SamSpade web site also offers several WHOIS related searches</ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">* [http://www.samspade.org/ Sam Spade]</ins></div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== Sample Cases ==</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== Sample Cases ==</div></td></tr> </table>

Jessek http://www.forensicswiki.org/w/index.php?title=Online_resources&diff=5966&oldid=prev 2007-02-25T21:21:00Z

<p>Added HoneyNet project</p> <table class='diff diff-contentalign-left'> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;'> <td colspan='2' style="background-color: white; color:black;">← Older revision</td> <td colspan='2' style="background-color: white; color:black;">Revision as of 21:21, 25 February 2007</td> </tr><tr><td colspan="2" class="diff-lineno">Line 7:</td> <td colspan="2" class="diff-lineno">Line 7:</td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://whois-search.com/ WHOIS-Search.com]</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>* [http://whois-search.com/ WHOIS-Search.com]</div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">== Sample Cases ==</ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">One of the most difficult things for new investigators is finding sample cases to work on. </ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="background: #cfc; color:black; font-size: smaller;"><div><ins style="color: red; font-weight: bold; text-decoration: none;">* The [http://honeynet.org/ HoneyNet Project] has several [http://honeynet.org/misc/chall.html forensics challenges] online. These include the &quot;Scan of Month&quot;, &quot;The Reverse Challenge,&quot; and &quot;The Forensic Challenge.&quot; The last one asked entrants to examine a complete RedHat Linux system for information. All of these challenges include complete solutions.</ins></div></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"></td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== Web Page Archives ==</div></td><td class='diff-marker'>&#160;</td><td style="background: #eee; color:black; font-size: smaller;"><div>== Web Page Archives ==</div></td></tr> </table>

Jessek http://www.forensicswiki.org/w/index.php?title=Online_resources&diff=5965&oldid=prev 2007-02-24T16:25:12Z

<p>WHOIS and web page archives</p> <p><b>New page</b></p><div>There are lots of web sites that can provide valuable information for forensic investigators. (This page will probably be broken into categories eventually...)<br /> <br /> == WHOIS Queries ==<br /> <br /> The WHOIS Service can be used to find the owner of a domain. Sometimes this is only sufficient to find the registrar for a domain, but even that is a start.<br /> <br /> * [http://whois-search.com/ WHOIS-Search.com]<br /> <br /> <br /> == Web Page Archives ==<br /> <br /> Web page archives can give the investigator a look at what a web page used to look like. The most well known is the [http://www.google.com/help/features.html#cached Google cache], but here are some others:<br /> <br /> * [http://web.archive.org The Internet Archive's WayBack Machine] can produce a nicely formatted page showing how a web site looked on certain dates. For example, [http://web.archive.org/web/*/http://www.yahoo.com/ the history of yahoo.com's homepage] gives a nice history lesson. The machine records both main pages and subpages. For example, note the changes in time between [[Jesse Kornblum]]'s [http://web.archive.org/web/*/http://www.profiles.yahoo.com/jessekornblum Yahoo! profile].</div>

Jessek