Analysis and Evaluation of the Windows Event Log - Bill Buchanan

More documents

Recommendations

Info

Barrie Codona, BSc (Hons) Network Computing, 2007 iFrame. (2008). Hash Calculator. Accessed 7 th 5 2008 from URL: http://iframe.in/hash-calculator/ Kent, K. and Souppaya, M. (2006). Guide to Computer Security Log Management National Institute of Standards and Technology Kessler (2004). An Overview of Steganography for the Computer Forensics Examiner Forensic Science Communications Liu, V. (2005). Metasploit antiforensics project Metaspolit Microsoft Corporation (2007). Net start. Retrieved November 26, 2007 from URL: http://technet2.microsoft.com/WindowsServer/en/library/6c0a1e0b-ea5d- 4a38-9682-944d17cfe11c1033.mspx Microsoft Corporation (2008). FileSystemWatcher Class. Accessed 21 st April 2008. URL: http://msdn2.microsoft.com/enus/library/system.io.filesystemwatcher.aspx Murphy, J. (2006). Forensic Readiness Dexisive Inc Nair, SK. Gamage, C. Dasti, MT. Crispo, B and Tanenbaum, AS (2006). Countering Digital Forensics: An Identity Based Ephemerizer Cryptosystem Vrije Universiteit NIST (2006). Forensic Techniques: Helping organisations improve their responses to information security incidents. National Institute of Standards and Technology NIST (2006). Log Management: Using computer and network records to improve information security. National Institute of Standards and Technology OED. (2008). Dictionary Facts. Retrieved 7 th May 2008 from URL: http://www.oed.com/about/facts.html Palmer, G. (2001). A Road Map for Digital Forensics Research Digital Forensic Research Workshop 71
Barrie Codona, BSc (Hons) Network Computing, 2007 Panigrahi, P. (2006). Discovering Fraud in Forensic Accounting Using Data Mining Techniques The Chartered Accountant Postnote (2006) Computer Crime Parliamentary Office of Science and Technology. Issue 271 Rogers, M. (2005). Hard Challenges for Digital Forensics http://www.mser.gov.bc.ca/privacyaccess/Conferences/Feb2005/ConfPresenta tions/Marcus_Rogers.pdf [accessed 26th November 2007] Westphal, K (2001) Secure Remote Log Servers Using SCP http://www.securityfocus.com/infocus/1394 [accessed 27th November 2007] Wikipedia (2008). Unix Time. Accessed 21 st April 2008. URL: http://en.wikipedia.org/wiki/Unix_time 72
Page 1 and 2:
Analysis and Evaluation of the Wind
Page 3 and 4:
Barrie Codona, BSc (Hons) Network C
Page 5 and 6:
Page 7 and 8:
Page 9 and 10:
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22: Barrie Codona, BSc (Hons) Network C
Page 71: Barrie Codona, BSc (Hons) Network C
Page 75 and 76: Appendix A: Diary Sheets
Page 77 and 78: NAPIER UNIVERSITY SCHOOL OF COMPUTI
Page 85 and 86: Appendix B: Preliminary Gantt Chart
Page 87 and 88: Nov '07 Dec '07 Jan '08 Feb '08 Mar
Page 89 and 90: C:\Documents and Settings\Barrie\My
Page 95 and 96: Appendix D: Server Application Code
Page 99 and 100: Appendix E: Event Viewer Code
Page 105 and 106: Appendix G: Processor Monitor Code
Page 107 and 108: Appendix H: HMAC Brute Force Cracke
Page 113 and 114: Appendix I: Windows Event Log Tests
Page 115 and 116: Copy Security Log C:\windows\system
Page 117 and 118: Another look at the Security Log re
Page 119 and 120: The Event Service is then restarted
Page 121 and 122: Another look at the ‘c:\windows\s
Page 123 and 124:
CO42019 - Project 4 Computer Name P
Page 125 and 126:
CO42019 - Project 4 Turned off the
Page 127 and 128:
CO42019 - Project 4 And then restar
Page 129 and 130:
CO42019 - Project 4 Modify the ‘l
Page 131 and 132:
CO42019 - Project 4 Project - Week
Page 133 and 134:
Page 135 and 136:
Page 137 and 138:
CO42019 - Project 4 As previously d
Page 139 and 140:
CO42019 - Project 4 The screenshot
Page 141 and 142:
CO42019 - Project 4 Displaying the
Page 143 and 144:
CO42019 - Project 4 Modifying the r
Page 145 and 146:
CO42019 - Project 4 Master File Tab
Page 147 and 148:
CO42019 - Project 4 Modify the sect
Page 149 and 150:
CO42019 - Project 4 Sectors 3748520
Page 151 and 152:
CO42019 - Project 4 This now shows
show all

Analysis and Evaluation of the Windows Event Log - Bill Buchanan

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?