Join Us!

Does anyone have a ...
 
Notifications
Clear all

Does anyone have a copy of these security papers?  

  RSS
andrewsco
(@andrewsco)
New Member

I have been checking out some great white papers on computer forensics, but there are 2 that seem to be down at the moment, and I cant find them anywhere…even google couldn't help me. They are:

Forensic Analysis of Microsoft Internet Explorer Cookie Files
Keith J. Jones

Forensic Analysis of Microsoft Windows Recycle Bin Records
Keith J. Jones

I could really do with reading them, I dont suppose anyone has a copy saved to there computer who could email me them?I know its a bit of an outside chance but its worth a shot. I assume they are freely available to read.

Andy

Quote
Posted : 27/03/2005 11:45 am
keydet89
(@keydet89)
Community Legend

Andy,

Are these the ones?

http://www.e-evidence.info/specific.html#win

Google is your friend…

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com

ReplyQuote
Posted : 27/03/2005 2:46 pm
keydet89
(@keydet89)
Community Legend

Oops…

Belay my last…none of the links that returned hits seem to actually have the PDF files.

Keith Jones was/is w/ Foundstone…have you tried searching the Blackhat archives?

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com

ReplyQuote
Posted : 27/03/2005 2:53 pm
andrewsco
(@andrewsco)
New Member

I actually typed it into google in "'s so that it was returned, there were a few files came up, but as you asy the pdf files didn't come up.

Perhaps there is a way to contact this guy?

Sco

ReplyQuote
Posted : 27/03/2005 4:15 pm
keydet89
(@keydet89)
Community Legend

Well, like I said…he is/was w/ Foundstone. I would think that since it's unlikely that he's on this list, perhaps going through one of the companies would be a more productive route.

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com

ReplyQuote
Posted : 28/03/2005 1:25 pm
Brian
(@brian)
New Member

Hi AndrewSco,
I've got copies of these - but in everyone's interest I'll post the url of the files and other papers written by Keith J Jones of a similar ilk. It's possible that you'll also find these well written and researched papers valuable.
I think the problem you & others had in locating them was that the files are not stored with the same name as the paper's title - making a search a little more complex.

http://mirror.optusnet.com.au/sourceforge/o/od/odessa/

Kind Regards
Brian A Crawford

ReplyQuote
Posted : 28/03/2005 4:30 pm
trewmte
(@trewmte)
Community Legend
Posted by: @andrewsco

Forensic Analysis of Microsoft Internet Explorer Cookie Files
Keith J. Jones

Forensic Analysis of Microsoft Windows Recycle Bin Records
Keith J. Jones

 

I have both 2003 articles.

ReplyQuote
Posted : 18/05/2020 5:10 am
Rich2005
(@rich2005)
Active Member

Something seems rather screwed. All the older post dates are back in 2005, and the initial reply to the first post (which provided a link to the requested documents) has vanished, along with my reply to it correcting the link which had been broken during posting.

This post was modified 1 week ago by Rich2005
ReplyQuote
Posted : 18/05/2020 9:32 am
Jamie
(@jamie)
Community Legend

@rich2005 Thanks, I'll take a look into that - might come back to you for more info later if that's OK.

ReplyQuote
Posted : 18/05/2020 9:37 am
Rich2005
(@rich2005)
Active Member

@jamiem No worries. I think it was jaclaz who initially replied to the first post and was probably on 14th May 2020 or just before (at least my post in reply was on that date judging by my internet history) in case this helps you narrow things down.

ReplyQuote
Posted : 18/05/2020 9:40 am
jaclaz
(@jaclaz)
Community Legend
Posted by: @rich2005

@jamiem No worries. I think it was jaclaz who initially replied to the first post and was probably on 14th May 2020 or just before (at least my post in reply was on that date judging by my internet history) in case this helps you narrow things down.

Yep, I can confirm.

Anyway (to the OP) those .pdf's are part of the Odessa White Papers on sourceforge, so we can also check how the new board parses links with spaces in them:

Plain:

https://sourceforge.net/projects/odessa/files/ODESSA/White Papers/

Using the stupid icon that wants to represent three (why three?) links of a chain:

https://sourceforge.net/projects/odessa/files/ODESSA/White Papers/

(it works like the old board, the space is not parsed in a "plain" link)

jaclaz

ReplyQuote
Posted : 18/05/2020 10:07 am
Jamie
(@jamie)
Community Legend

Many thanks! Looking at it, I think it's either indicative of an issue which needs to be fixed, or it's something which has cropped up as a side effect of something we fixed yesterday 🤣 I'll keep a close eye on it but apologies to yourself and jaclaz if we've dropped a couple of posts from this topic.

ReplyQuote
Posted : 18/05/2020 10:09 am
Rich2005
(@rich2005)
Active Member

@jamie Ignoring the posts earlier in this thread with dates from 2005, and the missing posts, there appear to be two entries for this thread visible from the general section:

ReplyQuote
Posted : 18/05/2020 11:20 pm
Jamie
(@jamie)
Community Legend

Yes indeed, thank you (although one with an additional character I think). The good news is I haven't see any other anomalies of a similar nature and everything else seems to be working OK so far...fingers crossed!

ReplyQuote
Posted : 18/05/2020 11:36 pm
Share: