Computer Forensic Analysis Class

On August 6th, 1999, Dan Farmer (Earthlink) and Wietse Venema (IBM) presented a full-day free class on UNIX computer forensic analysis, sponsored by IBM. The class was attended by an audience of over 200 and was given at the IBM T.J. Watson Research Center near Yorktown Heights (NY, USA).

At the end of the class, official gold Internet Detective badges were handed out to attendees, courtesy of Earthlink.

Class Handouts

All slides used in presenting the class are below, in postscript form. The files created with MS Power Point (e.g. those done by Dan) require a PostScript level 3 printer: old printers and old GHOSTVIEW versions have problems. The files created with XFIG (e.g. those created by Wietse) are actually a concatenation of many little files. They will not display properly if your viewer expects embedded pagination information. In order to view, try, for example:

cat file.ps | ghostview -landscape -

This material amounts to 215 pages, so you can save a tree by printing double sided.