I have been checking out some great white papers on computer forensics, but there are 2 that seem to be down at the moment, and I cant find them anywhere…even google couldn't help me. They are:
Forensic Analysis of Microsoft Internet Explorer Cookie Files
Keith J. Jones
Forensic Analysis of Microsoft Windows Recycle Bin Records
Keith J. Jones
I could really do with reading them, I dont suppose anyone has a copy saved to there computer who could email me them?I know its a bit of an outside chance but its worth a shot. I assume they are freely available to read.
Andy
Andy,
Are these the ones?
Google is your friend…
H. Carvey
"Windows Forensics and Incident Recovery"
Oops…
Belay my last…none of the links that returned hits seem to actually have the PDF files.
Keith Jones was/is w/ Foundstone…have you tried searching the Blackhat archives?
H. Carvey
"Windows Forensics and Incident Recovery"
I actually typed it into google in "'s so that it was returned, there were a few files came up, but as you asy the pdf files didn't come up.
Perhaps there is a way to contact this guy?
Sco
Well, like I said…he is/was w/ Foundstone. I would think that since it's unlikely that he's on this list, perhaps going through one of the companies would be a more productive route.
H. Carvey
"Windows Forensics and Incident Recovery"
Hi AndrewSco,
I've got copies of these - but in everyone's interest I'll post the url of the files and other papers written by Keith J Jones of a similar ilk. It's possible that you'll also find these well written and researched papers valuable.
I think the problem you & others had in locating them was that the files are not stored with the same name as the paper's title - making a search a little more complex.
Kind Regards
Brian A Crawford
Forensic Analysis of Microsoft Internet Explorer Cookie Files
Keith J. JonesForensic Analysis of Microsoft Windows Recycle Bin Records
Keith J. JonesÂ
I have both 2003 articles.
Something seems rather screwed. All the older post dates are back in 2005, and the initial reply to the first post (which provided a link to the requested documents) has vanished, along with my reply to it correcting the link which had been broken during posting.
@rich2005 Thanks, I'll take a look into that - might come back to you for more info later if that's OK.
@jamiem No worries. I think it was jaclaz who initially replied to the first post and was probably on 14th May 2020 or just before (at least my post in reply was on that date judging by my internet history) in case this helps you narrow things down.
