Need Some imaged (dd) for Analyzation

Greetings,

Try doing a Google search for "forensics challenge" and you'll find several images.

Also, image your own system and then practice looking for things you know are on there. To go further, try adding things to your system, or deleting them and then reimage and reexamine it.

-David

Here are a few I have investigated recently

http//www.cfreds.nist.gov/Hacking_Case.html
http//www.shortinfosec.net/2008/07/competition-computer-forensic.html
http//dftt.sourceforge.net/

You can also set up a VMware operating system and analyse that.

Real Digital Forensics Computer Security and Incident Response is an excellent book which I highly recommend. It comes will a CD that contains 5 images and other "evidence" from 5 scenarios which are briefly described at the beginning of the book. These scenarios are continually referenced throughout the book as various aspects of forensics are addressed.

Data Forensics & Security Consultant
TCS Forensics Ltd.

Good Info in here..Thanks