Guidelines, Best Practice, and Standards?!?!?!?

Have you gone through everything at SANS?

http//www.sans.org/reading_room/

And
http//www.faqs.org/rfcs/rfc3227.html

2002 but still very relevant. Harlan Carvey - referenced it in Windows Forensic Analysis 2 that just came out a few months ago. That is another good resource as well.

Hi Michael,

I did my dissertation back at 2006 on standards/guidelines moslty focusing on the collection phase. I used methodologies from UK, Europe, Hong Kong, Australia and also the ones you refer. Unfortunatelly most of the links are not active today. So I can only suggest looking at their main sites for locating the guidelines

http//www.isfs.org.hk/ , Information Security and Forensics Society (Hong Kong)

http//www.aic.gov.au/ , Australian Institute of Criminology

http//www.enfsi.eu/ , European Network of Forensics Science Institutes

http//www.ncjrs.gov/ , National Criminal Justice Reference Service (USA)

http//www.ncfs.org/digital_evd.html, National Center for Forensic Science (USA)

For reference and compliance International Association of Computer Investigative Specialists http//www.iacis.com/

There was also a treaty by the Council of Europe that suggested some actions, but not in the format of a guideline. It leaved space for localisation and mainly refered to the ISP traffic and stored data http//www.coe.int/

Also look at www.ioce.org (International Organization on Computer Crime), it had a best practice guide, using the G8 principles for digital evidence.

I finally found useful RFC3227 (Guidelines for Evidence Collection and Archiving), http//www.faqs.org/rfcs/rfc3227.html.

Hope this helps,

Maya.

Probably has the most recent information on standards

SWGDE
http//www.swgde.org/

Others not already mentioned

ACPO Good Practice Guide for Computer-Based Evidence
http//www.7safe.com/electronic_evidence/index.html#

Best Practices for Seizing Electronic Evidence
http//www.forwardedge2.com/

Directors' and Corporate Advisors' Guide to Digital Investigations
http//www.iaac.org.uk/Portals/0/DigitalInvestigationsGuide.pdf

Suggest looking at the 'Digital Insider' series of articles
http//www.forensicmag.com/articleindex.asp

Best of Luck!

Thank you all for the quick responces. I had some of this material, but there is a lot of new stuff I have not covered yet. I really appreciate the feedback!
Thanks,
Michael

I've started with a small forensics project (yep, another Live CD!) and am thinking of keeping a delicious tag for beginners-forensics or something similar if you want to do so as you find things? I should get round to doing it this weekend or so.

Good luck!

Ben