PyFlag - An advanced network forensic framework

Digital Investigation

Volumn 5, Issue SUPPL., 2008, Pages

  Cohen, M I ^a  

^a Australian Federal Police   (Australia)

Author keywords

Digital forensics; HTML analysis; Network forensics; Protocol analysis; Python (programming language); Telecommunication intercept analysis; Web application forensics

Indexed keywords

COMPUTER SYSTEMS PROGRAMMING; HTML; OPEN SOURCE SOFTWARE; WEB CRAWLER;

HTML ANALYSIS; PROTOCOL ANALYSIS; PYTHON PROGRAMMING LANGUAGE; TELECOMMUNICATION INTERCEPT ANALYSIS; WEB APPLICATION FORENSICS;

DIGITAL FORENSICS;

EID: 48749096299     PISSN: 17422876     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.diin.2008.05.016     Document Type: Article

References (15)

1. Ajax (programming) (March 2008). http://en.wikipedia.org/wiki/AJAX
2. Cohen M., and Collett D. Python forensic log analysis GUI (PyFlag) (2005). http://www.pyflag.net
3. Eeye Iris network security traffic analyser (May 2008). http://www.eeye.com/html/Products/Iris/index.html
4. Free Software Foundation. Gnu general public license (June 2007). http://www.gnu.org/copyleft/gpl.html
5. Google Inc. Gmail (2008). http://mail.google.com
6. Kloet B., Metz J., and Mora R.-J. Libewf - a library for support of the expert witness compression format (May 2007). https://www.uitwisselplatform.nl/projects/libewf
7. Network Working Group. Hypertext transfer protocol - HTTP/1.1 (1999). http://www.w3.org/Protocols/rfc2616/rfc2616.html
8. Pilgrim M. HTML sanitization. [universal feed parser] (2006). http://www.feedparser.org/docs/html-sanitization.html
9. Ptacek T.H., and Newsham T.N. Insertion, evasion and denial of service: eluding network intrusion detection system (Jan 1998). http://www.snort.org/docs/idspaper
10. Snort - the de facto standard for intrusion detection/prevention (March 2008). http://www.snort.org
11. Song, D. http://www.monkey.org/dugsong/fragroute/Fragroute; 2001.
12. Tcpdump (2007). http://www.tcpdump.org/Sep
13. Communications interception, analysis, and service provider compliance (May 2008). http://verint.com/communications_interception
14. Wireshark (2008). http://www.wireshark.org/Feb
15. Wojtczuk R. Libnids. Version 1.23 (Feb 23, 2008). http://libnids.sourceforge.net