“Tracing IP Addresses” is the second in of a series of free webinars offered by Vere Software. On Thursday, October 22, starting at 11 a.m. Pacific time, associate professor and consultant of digital forensics Gary Kessler will present this 60-minute webinar designed to show corporate and law enforcement investigators a critical part of the Internet’s inner workings…This webinar will introduce basic terms and concepts about the Transmission Control Protocol/Internet Protocol (TCP/IP) suite, the Internet, IP addressing and domain names, and the administration of Internet names and numbers. Tools to support IP tracing will be demonstrated, including ping, traceroute, whois, nslookup, port scanners, Sam Spade, and DNSstuff.
“Investigators need to be able to understand the networking clues left on the computer,” said Kessler, “such as where to look, and how the clues can mislead. For example, the email header doesn’t prove who sent the email. Taken together with digital forensics, IP information can provide exculpatory or incriminating information which leads the investigator in a direction he or she may not otherwise have gone.”
Todd Shipley, president and CEO of Vere Software, added, “The concept of IP address tracing may seem simple, but it lays the groundwork for online investigations. Dr. Kessler’s expertise will show investigators not just how to trace IP addresses, but also why it’s important, along with the place it holds in proper forensic procedure.”
ABOUT GARY KESSLER:
Gary C. Kessler is an Associate Professor and program director of the M.S. in Digital Investigation Management program at Champlain College (Burlington, Vermont), where he also started the Computer & Digital Forensics undergraduate program. A member of the Vermont Internet Crimes Against Children (ICAC) Task Force and a CISSP, CCE, and DFCP, he has a consulting practice in computer and network forensics, mobile device forensics, computer and network security, TCP/IP and the Internet, and communications protocols and standards.
ABOUT VERE SOFTWARE:
Incorporated in February 2007, Vere Software, Inc. designs, develops, programs, and markets software and hardware built upon concepts related to online evidence collection and preservation. Offered to both public and private markets domestically and internationally, Vere Software’s WebCase and related products meet the standard for criminal legal defensibility by logging, date and time stamping collected Internet evidence, then authenticating it via one of a number of accepted hash algorithms.