-
1
-
-
84882069196
-
-
http://www.vulnwatch.org/netcat/.
-
-
-
-
2
-
-
84882214002
-
-
http://www.ntsecurity.nu/toolbox/pmdump/.
-
-
-
-
3
-
-
84882179296
-
-
http://www.microsoft.com/technet/sysinternals/Miscellaneous/Strings.mspx.
-
-
-
-
4
-
-
84882163063
-
-
http://info.sen.ca.gov/pub/0102/bill/sen/sb_1351.
-
-
-
-
5
-
-
84882234182
-
-
http://msdn.microsoft.com/library/default.asp?url=/library/enus/sysinfo/base/file_times.asp.
-
-
-
-
6
-
-
84882064506
-
-
http://www.microsoft.com/technet/sysinternals/Systemlnformation/PsLoggedOn.mspx.
-
-
-
-
7
-
-
84882220224
-
-
http://www.microsoft.com/technet/sysinternals/Security/LogonSessions.mspx.
-
-
-
-
8
-
-
84882184726
-
-
http://www.symantec.com/avcenter/venc/data/backdoor.subseven.html.
-
-
-
-
9
-
-
84882183910
-
-
http://www.microsoft.com/technet/sysinternals/utilities/psfile.mspx.
-
-
-
-
10
-
-
84882129832
-
-
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/enus/openfiles.mspx.
-
-
-
-
11
-
-
84882071406
-
-
http://en.wikipedia.org/wiki/NetBIOS.
-
-
-
-
12
-
-
84882128103
-
-
http://support.microsoft.com/kb/ql63409/.
-
-
-
-
13
-
-
84882161183
-
-
http://support.microsoft.com/kb/119495/ENUS/.
-
-
-
-
14
-
-
84882106916
-
-
http://support.microsoft.com/?id=837243.
-
-
-
-
15
-
-
84882165328
-
-
http://support.microsoft.com/kb/137984/.
-
-
-
-
16
-
-
84882169167
-
-
http://vil.nai.com/vil/content/v_100559.htm.
-
-
-
-
17
-
-
84882141184
-
-
http://support.microsoft.com/default.aspx?scid=kb;enus;236995.
-
-
-
-
18
-
-
84882054548
-
-
http://support.microsoft.com/kb/222193/ENUS/.
-
-
-
-
19
-
-
84882222253
-
-
http://www.microsoft.com/whdc/devtools/debugging/default.mspx.
-
-
-
-
20
-
-
84882188190
-
-
http://www.diamondcs.com.au/index.php?page=consolecmdline.
-
-
-
-
21
-
-
84882208144
-
-
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en.
-
-
-
-
22
-
-
84882056516
-
-
http://www.sysinternals.com/Utilities/PsList.html.
-
-
-
-
23
-
-
84882225328
-
-
http://www.sysinternals.com/Utilities/ListDlls.html.
-
-
-
-
24
-
-
84882216980
-
-
http://www.sysinternals.com/Utilities/Handle.html.
-
-
-
-
25
-
-
84882083252
-
-
http://msdn.microsoft.com/library/default.asp?url=/library/enus/wmisdk/wmi/win32_process.asp.
-
-
-
-
26
-
-
84882134869
-
-
http://support.microsoft.com/default.aspx?scid=kb;enus;314056.
-
-
-
-
27
-
-
84882180671
-
-
http://support.microsoft.com/default.aspx?scid=kb;enus;250320.
-
-
-
-
28
-
-
84882148150
-
-
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.xts.html.
-
-
-
-
29
-
-
84882188217
-
-
http://securityresponse.symantec.eom/avcenter/venc/data/backdoor.litmus.203.b.html.
-
-
-
-
30
-
-
84882203036
-
-
http://support.microsoft.com/kb/927229.
-
-
-
-
31
-
-
84882191620
-
-
http://www.microsoft.com/technet/sysinternals/Networking/TcpView.mspx.
-
-
-
-
32
-
-
84882158953
-
-
http://www.foundstone.com/.
-
-
-
-
33
-
-
84882051389
-
-
http://www.diamondcs.com.au/openports/.
-
-
-
-
34
-
-
84882201835
-
-
http://www.insecure.org/nmap/index.html.
-
-
-
-
35
-
-
84882198074
-
-
http://support.microsoft.com/kb/314850.
-
-
-
-
36
-
-
84882111842
-
-
http://www.ntsecurity.nu/toolbox/promiscdetect/.
-
-
-
-
37
-
-
84882221591
-
-
http://support.microsoft.com/?kbid=892853.
-
-
-
-
38
-
-
84882212576
-
-
http://www.wireshark.org.
-
-
-
-
39
-
-
84882054032
-
-
http://support.microsoft.com/default.aspx?scid=KB;ENUS;Q224993.
-
-
-
-
40
-
-
84882065875
-
-
http://unxutils.sourceforge.net/.
-
-
-
-
41
-
-
84882055691
-
-
http://msdn.microsoft.com/library/default.asp?url=/library/enus/wmisdk/wmi/win32_service.asp.
-
-
-
-
42
-
-
84882197425
-
-
http://support.microsoft.com/kb/182086/ENUS/.
-
-
-
-
43
-
-
84882063213
-
-
http://support.microsoft.com/kb/314834/ENUS/.
-
-
-
-
44
-
-
84882105570
-
-
http://support.microsoft.com/default.aspx?scid=kb;enus;555041.
-
-
-
-
45
-
-
84882082594
-
-
http://www.download.microsoft.com/download/2/8/0/2800a518.
-
-
-
-
46
-
-
84882163488
-
-
http://www.sysinternals.com/Utilities/Autoruns.html.
-
-
-
-
47
-
-
84882095593
-
-
http://www.ntsecurity.nu/toolbox/pstoreview/.
-
-
-
-
48
-
-
84882229347
-
-
http://www.codeproject.com/tools/PSExplorer.asp.
-
-
-
-
49
-
-
84882109434
-
-
http://www.washingtonpost.com/wpdyn/content/article/2006/02/14/AR2006021401342.html.
-
-
-
-
50
-
-
84882083030
-
-
http://www.microsoft.com/windows/ie/using/howto/customizing/autocomplete.mspx.
-
-
-
-
51
-
-
84882204183
-
-
http://www.nirsoft.net/utils/pspv.html.
-
-
-
-
52
-
-
84882163774
-
-
http://www.forensicideas.com/tools.html.
-
-
-
-
53
-
-
84882172651
-
-
http://www.ntsecurity.nu/toolbox/pstoreview/.
-
-
-
-
54
-
-
84882116251
-
-
http://www.sysinternals.com/Utilities/PsLogList.html.
-
-
-
-
55
-
-
84882139597
-
-
http://www.somarsoft.com/.
-
-
-
-
56
-
-
84882225108
-
-
http://support.microsoft.com/?kbid=311272.
-
-
-
-
57
-
-
84882158592
-
-
http://www.microsoft.com/technet/sysinternals/SystemInformation/Regmon.mspx.
-
-
-
-
58
-
-
84882102729
-
-
http://www.microsoft.com/technet/sysinternals/SystemInformation/Filemon.mspx.
-
-
-
-
59
-
-
84882226347
-
-
http://www.wireshark.org/.
-
-
-
-
60
-
-
84882059709
-
-
http://tools.phantombyte.com/.
-
-
-
-
61
-
-
84882199259
-
-
http://www.foolmoon.net/security/wft/index.html.
-
-
-
-
62
-
-
84882112321
-
-
http://www.agilerm.net/publications_4.html.
-
-
-
-
63
-
-
84882048099
-
-
http://www.microsoft.com/technet/scriptcenter/default.mspx.
-
-
-
-
64
-
-
84882108141
-
-
http://isc.sans.org/diary.php?storyid=1622.
-
-
-
-
65
-
-
84882215602
-
-
http://msdn.microsoft.com/library/default.asp?url=/library/enus/wmisdk/wmi/wmic.asp.
-
-
-
-
66
-
-
84882222582
-
-
http://isc.sans.org/diaryphp?storyid:=1622.
-
-
-
-
67
-
-
84882069685
-
-
http://msdn.microsoft.com/library/default.asp?url=/library/enus/wmisdk/wmi/win32_classes.asp.
-
-
-
-
68
-
-
84882144476
-
-
http://www.techpathways.com/ProDiscoverIR.htm.
-
-
-
-
69
-
-
84882200936
-
-
http://en.wikipedia.org/wiki/Netcat.
-
-
-
-
70
-
-
84882223410
-
-
http://www.evidence.info.
-
-
-
-
71
-
-
84882165615
-
-
http://support.microsoft.com/?kbid=263201.
-
-
-
-
72
-
-
84882106883
-
-
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/management/svrxpser_7.mspx#E5C.
-
-
-
-
73
-
-
84882230350
-
-
http://en.wikipedia.org/wiki/Jesse_Kornblum.
-
-
-
-
74
-
-
84882098485
-
-
http://www.washingtonpost.com/wpdyn/content/article/2006/02/14/AR2006021401342.html.
-
-
-
-
75
-
-
84882164736
-
-
http://www.securityfocus.com/news/11390.
-
-
-
-
76
-
-
84882100500
-
-
http://www.cert.org/advisories/CA2003.
-
-
-
-
77
-
-
84882227088
-
-
http://support.microsoft.com/?kbid=250320.
-
-
-
-
78
-
-
84882145116
-
-
http://support.microsoft.com/kb/314056/ENUS/.
-
-
-
-
79
-
-
84882193159
-
-
http://support.microsoft.com/?kbid=263201.
-
-
-
-
80
-
-
84882063074
-
-
http://www.wireshark.org/.
-
-
-
-
81
-
-
84882127272
-
-
http://www.securityfocus.com/infocus/1618.
-
-
-
-
82
-
-
84882219876
-
-
http://www.symantec.com/security_response/writeup.jsp?docid=2006081415.
-
-
-
-
83
-
-
84882213756
-
-
http://www.ranum.com/.
-
-
-
-
84
-
-
84882220148
-
-
http://www.sensepost.com/research_conferences.html.
-
-
-
-
85
-
-
84882103681
-
-
http://www.roth.net/perl/scripts/.
-
-
-
-
86
-
-
84882195377
-
-
http://support.microsoft.com/default.aspx?scid=kb;enus;328691.
-
-
-
-
87
-
-
84882223703
-
-
http://www.microsoft.com/technet/prodtechnol/acs/proddocs/accrsc_isscr.mspx?mfr=true.
-
-
-
-
88
-
-
84882128898
-
-
http://www.cert.org/advisories/CA2001.
-
-
-
-
89
-
-
84882116139
-
-
http://www.microsoft.com/technet/security/tools/urlscan.mspx.
-
-
-
-
90
-
-
84882213567
-
-
http://www.cert.org/advisories/CA2001.
-
-
-
-
91
-
-
84882181661
-
-
http://www.dfrws.org.
-
-
-
-
92
-
-
84882233092
-
-
http://www.efense.com/helix/.
-
-
-
-
93
-
-
84882136497
-
-
http://computer.forensikblog.de/en/topics/windows/memory_analysis/.
-
-
-
-
94
-
-
84882128127
-
-
http://www.lurhq.com/truman/.
-
-
-
-
95
-
-
84882166926
-
-
http://www.blackhat.com/html/bhfederal.
-
-
-
-
96
-
-
84882170197
-
-
http://nucia.unomaha.edu/tvidas/.
-
-
-
-
97
-
-
84882052593
-
-
http://www.grandideastudio.com/.
-
-
-
-
98
-
-
84882073420
-
-
http://www.storm.net.nz/projects/16.
-
-
-
-
99
-
-
84882121242
-
-
http://www.python.org.
-
-
-
-
100
-
-
84882062148
-
-
http://ntsecurity.nu/onmymind/2006/200609.
-
-
-
-
101
-
-
84882134401
-
-
http://en.wikipedia.org/wiki/Blue_Screen_of_Death.
-
-
-
-
102
-
-
84882083789
-
-
http://www.microsoft.com/whdc/devtools/debugging/default.mspx.
-
-
-
-
103
-
-
84882143646
-
-
http://www.microsoft.com/downloads/details.aspx?FamilyID=E84D3B3563C3.
-
-
-
-
104
-
-
84882127874
-
-
http://support.microsoft.com/kb/254649/.
-
-
-
-
105
-
-
84882152125
-
-
http://support.microsoft.com/kb/274598/.
-
-
-
-
106
-
-
84882051362
-
-
http://support.microsoft.com/kb/307973/.
-
-
-
-
107
-
-
84882136521
-
-
http://support.microsoft.com/kb/244139/.
-
-
-
-
108
-
-
84882137793
-
-
http://www.microsoft.com/downloads/details.aspx?FamilyID=:E84D3B3563C3.
-
-
-
-
109
-
-
84882232166
-
-
http://support.citrix.com/article/CTX107717parentCategoryID=617.
-
-
-
-
110
-
-
84882133642
-
-
http://www.microsoft.com/technet/sysinternals/SystemInformation/LiveKd.mspx.
-
-
-
-
111
-
-
84882073241
-
-
http://bochs.sourceforge.net/.
-
-
-
-
112
-
-
84882235498
-
-
http://users.erols.com/gmgarner/forensics/develop.
-
-
-
-
113
-
-
84882203216
-
-
http://computer.forensikblog.de/en/topics/windows/memory_analysis/.
-
-
-
-
114
-
-
84882170934
-
-
http://www.microsoft.com/whdc/devtools/debugging/default.mspx.
-
-
-
-
115
-
-
33748034121
-
-
Chapter 6, Microsoft Press, Redmond, WA
-
Russinovich Mark E., Solomon David A. Windows Internals 2005, Chapter 6, Microsoft Press, Redmond, WA. fourth edition.
-
(2005)
Windows Internals
-
-
Russinovich, M.E.1
Solomon, D.A.2
-
116
-
-
84882167671
-
-
http://www.dfrws.org/2006/proceedings/2Schuster.pdf.
-
-
-
-
117
-
-
84882135514
-
-
http://www.efense.com/helix/.
-
-
-
-
118
-
-
84882222633
-
-
http://computer.forensikblog.de/en/2006/04/persistance_through_the_boot_process.html.
-
-
-
-
119
-
-
84882086179
-
-
http://computer.forensikblog.de/en/2006/04/data_lifetime.html.
-
-
-
-
120
-
-
84882068129
-
-
http://msdn.microsoft.com/library/default.asp?url=/library/enus/mobilesdk5/html/wce501rfVSVERSIONINFO.asp.
-
-
-
-
121
-
-
84882110700
-
-
http://ssdeep.sourceforge.net/.
-
-
-
-
122
-
-
84882096438
-
-
http://dfrws.org/2006/proceedings/12Kornblum.pdf.
-
-
-
-
123
-
-
84882146978
-
-
http://www.microsoft.com/whdc/driver/tips/PoolMem.mspx.
-
-
-
-
124
-
-
84882073139
-
-
http://support.microsoft.com/default.aspx?scid=kb;enus;298102.
-
-
-
-
125
-
-
84882151131
-
-
http://computer.forensikblog.de/en/2006/07/finding_network_socket_activity_in_pools.html.
-
-
-
-
126
-
-
84882176325
-
-
http://www.ntsecurity.nu/toolbox/pmdump/.
-
-
-
-
127
-
-
84882173095
-
-
http://www.trapkit.de/research/forensic/pd/index.html.
-
-
-
-
128
-
-
84882227119
-
-
http://www.trapkit.de/research/sslkeyfinder/index.html.
-
-
-
-
129
-
-
84882048825
-
-
http://www.rtiicrosoft.corn/technet/sysinternals/ProcessesAndThreads/Handle.mspx.
-
-
-
-
130
-
-
84882225219
-
-
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ListDlls.mspx.
-
-
-
-
131
-
-
84882181029
-
-
http://support.microsoft.com/kb/286350.
-
-
-
-
132
-
-
84882087914
-
-
http://support.microsoft.com/kb/256986.
-
-
-
-
133
-
-
84882185318
-
-
http://support.microsoft.com/default.aspx?scid=kb;enus;141377.
-
-
-
-
134
-
-
84882049151
-
-
http://support.microsoft.com/default.aspx?scid=kb;enus;161678.
-
-
-
-
135
-
-
84882224908
-
-
http://www.microsoft.com/technet/archive/winntas/tips/winntrnag/inreg.rnspx?mfr=true.
-
-
-
-
136
-
-
84882141695
-
-
http://home.eunet.no/pnordahl/ntpasswd/.
-
-
-
-
137
-
-
84882061876
-
-
http://www.sleuthkit.org/.
-
-
-
-
138
-
-
84882148149
-
-
http://pyflag.sourceforge.net/.
-
-
-
-
139
-
-
84882099823
-
-
http://support.microsoft.com/default.aspx?scid=kb;enus;188768.
-
-
-
-
140
-
-
84882208805
-
-
http://msdn.microsoft.com/library/default.asp?url=/library/enus/sysinfo/base/file.
-
-
-
-
141
-
-
84882132250
-
-
http://vil.nai.com/vil/Content/v_140546.htm.
-
-
-
-
142
-
-
84882115992
-
-
http://home.planet.nl/~paOjoz/pc_util.html.
-
-
-
-
143
-
-
84882110495
-
-
http://www.microsoft.com/technet/sysinternals/SystemInformation/Regmon.mspx.
-
-
-
-
144
-
-
84882135515
-
-
http://liveview.sourceforge.net/.
-
-
-
-
145
-
-
84882132215
-
-
http://support.microsoft.com/kb/288164/enus.
-
-
-
-
146
-
-
84882183351
-
-
http://support.microsoft.com/default.aspx?scid=kb;ENUS;q246120.
-
-
-
-
147
-
-
84882084930
-
-
http://support.microsoft.com/kb/298931.
-
-
-
-
148
-
-
84882071297
-
-
http://support.microsoft.com/kb/310560.
-
-
-
-
149
-
-
84882224093
-
-
http://msdn.microsoft.com/library/default.asp?url=/library/enus/wmisdk/wmi/win32_startupcommand.asp.
-
-
-
-
150
-
-
84882194109
-
-
http://www.microsoft.com/technet/prodtechnol/winxppro/reskit/c29621675.mspx.
-
-
-
-
151
-
-
84882052541
-
-
http://support.microsoft.com/default.aspx?scid=kb;ENUS;137367.
-
-
-
-
152
-
-
84882060556
-
-
http://support.microsoft.com/kb/314866/ENUS/.
-
-
-
-
153
-
-
84882211153
-
-
http://liveview.sourceforge.net/.
-
-
-
-
154
-
-
84882185346
-
-
http://support.microsoft.com/?kbid=311446.
-
-
-
-
155
-
-
84882061555
-
-
http://support.microsoft.com/?kbid=310585.
-
-
-
-
156
-
-
84882056818
-
-
http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/enus/Default.asp?url=/resources/documentation/Windows/2000/server/reskit/en.
-
-
-
-
157
-
-
84882142708
-
-
http://support.microsoft.com/kb/197571.
-
-
-
-
158
-
-
84882061494
-
-
http://msdn.microsoft.com/library/default.asp?url=/library/enus/secauthn/security/registry_entries.asp.
-
-
-
-
159
-
-
84882158834
-
-
http://support.microsoft.com/default.aspx?kbid=238788.
-
-
-
-
160
-
-
84882057384
-
-
http://support.microsoft.com/default.aspx?scid=kb;enus;892894.
-
-
-
-
161
-
-
84882057740
-
-
http://silverstr.ufies.org/blog/archives/000809.html.
-
-
-
-
162
-
-
84882068084
-
-
http://www.sysinternals.com/ntw2k/freeware/autoruns.shtml.
-
-
-
-
163
-
-
84882144708
-
-
http://www.microsoft.corn/whdc/device/stream/vidcap/UVCView.rnspx.
-
-
-
-
164
-
-
84882149811
-
-
http://www.microsoft.com/whdc/system/bus/usb/USBFAQ_intermed.mspx.
-
-
-
-
165
-
-
84882135979
-
-
http://www.microsoft.com/whdc/device/storage/usbfaq.mspx#ERCAC.
-
-
-
-
166
-
-
84882161931
-
-
http://www.microsoft.com/technet/prodtechnol/window000serv/reskit/regentry/93502.mspx?mfr=true.
-
-
-
-
167
-
-
84882049520
-
-
http://www.hak5.org/wiki/USB_Hacksaw.
-
-
-
-
168
-
-
84882131206
-
-
http://support.microsoft.com/kb/157234/.
-
-
-
-
169
-
-
84882068414
-
-
http://www.accessdata.com/support/downloads/.
-
-
-
-
170
-
-
84882138190
-
-
http://search.cpan.org/~jmacfarla/ParseWin32Registry.
-
-
-
-
171
-
-
84882079634
-
-
http://computer.forensikblog.de/en/2006/02/list_members_of_a_windows_group.html.
-
-
-
-
172
-
-
84882086458
-
-
http://support.microsoft.com/default.aspx?scid=:kb;enus;322948.
-
-
-
-
173
-
-
84882232421
-
-
http://support.microsoft.com/kb/813711.
-
-
-
-
174
-
-
84882218993
-
-
http://support.microsoft.com/kb/235994.
-
-
-
-
175
-
-
84882076035
-
-
http://support.microsoft.com/kb/295659.
-
-
-
-
176
-
-
84882093481
-
-
http://msdn.microsoft.com/library/default.asp?url=/library/enus/sr/sr/systemre.
-
-
-
-
177
-
-
84882123079
-
-
http://msdn.microsoft.com/library/default.asp?url=/library/enus/sr/sr/systemre.
-
-
-
-
178
-
-
84882201280
-
-
http://msdn2.microsoft.com/enus/library/aa380129.aspx.
-
-
-
-
179
-
-
84882134842
-
-
http://support.microsoft.com/kb/299475/.
-
-
-
-
180
-
-
84882223866
-
-
http://support.microsoft.com/kb/301677/ENUS/.
-
-
-
-
181
-
-
84882190223
-
-
http://blogs.msdn.com/ericfitz/default.aspx.
-
-
-
-
182
-
-
84882221597
-
-
http://www.microsoft.com/technet/support/ee/ee_advanced.aspx.
-
-
-
-
183
-
-
84882187285
-
-
http://support.microsoft.com/kb/329463/enus.
-
-
-
-
184
-
-
84882135763
-
-
http://pyflag.sourceforge.net/.
-
-
-
-
185
-
-
84882157534
-
-
http://128.175.24.251/forensics/repaireventlogfile.htm.
-
-
-
-
186
-
-
84882072345
-
-
To read Andreas Schuster's blog, go to
-
To read Andreas Schuster's blog, go to. http://computer.forensikblog.de/e.
-
-
-
-
187
-
-
84882196490
-
-
http://www.ranum.com.
-
-
-
-
188
-
-
84882100422
-
-
http://support.microsoft.com/?id=318380.
-
-
-
-
189
-
-
84882086887
-
-
http://xforce.iss.net/xforce/xfdb/3682.
-
-
-
-
190
-
-
84882162859
-
-
http://www.cert.org/advisories/CA2001.
-
-
-
-
191
-
-
84882049079
-
-
http://www.stevengould.org/software/indexdatspy/screenshots.html.
-
-
-
-
192
-
-
84882147697
-
-
http://www.systenance.com/indexdat.php.
-
-
-
-
193
-
-
84882211049
-
-
http://support.microsoft.com/kb/283673.
-
-
-
-
194
-
-
84882197186
-
-
http://support.microsoft.com/kb/308127.
-
-
-
-
195
-
-
84882185945
-
-
http://support.microsoft.com/kb/308538/.
-
-
-
-
196
-
-
84882158393
-
-
http://support.microsoft.com/kb/156280/.
-
-
-
-
197
-
-
84882232913
-
-
http://support.microsoft.com/kb/315271/.
-
-
-
-
198
-
-
84882133643
-
-
http://support.microsoft.com/kb/136517.
-
-
-
-
199
-
-
84882094266
-
-
http://www.datalifter.com/tutorial/bt/NProtect_Using_NProtect.htm.
-
-
-
-
200
-
-
84882111473
-
-
http://www.ediscovery.co.nz/wip/srp.html.
-
-
-
-
201
-
-
84882227999
-
-
http://support.microsoft.com/kb/301224.
-
-
-
-
202
-
-
84882153559
-
-
http://wAVW.mitec.cz/wfa.htm.
-
-
-
-
203
-
-
84882160674
-
-
http://www.i2slab.com/Papers/The_Windows_Shortcut_File_Format.pdf.
-
-
-
-
204
-
-
84882095206
-
-
http://www.forensicfocus.com/linkfile.
-
-
-
-
205
-
-
84882135960
-
-
http://jafat.sourceforge.net/files.html.
-
-
-
-
206
-
-
84882067403
-
-
http://support.microsoft.com/?kbid=299648.
-
-
-
-
207
-
-
84882188823
-
-
http://www.metasploit.org/projects/antiforensics/.
-
-
-
-
208
-
-
84882147709
-
-
http://www.computerbytesman.com/privacy/blair.htm.
-
-
-
-
209
-
-
84882048556
-
-
http://support.microsoft.com/kb/834427.
-
-
-
-
210
-
-
84882099017
-
-
http://www.ntkernel.com/wphp?id=23.
-
-
-
-
211
-
-
84882203962
-
-
http://www.friedemannschmidt.com/software/exifer/.
-
-
-
-
212
-
-
84882078126
-
-
http://www.irfanview.com/.
-
-
-
-
213
-
-
84882202474
-
-
http://search.cpan.org/~bettelli/ImageMetaData.
-
-
-
-
214
-
-
84882235841
-
-
http://toorcon.techpathways.com/cs/forums/storage/8/11/EXIF.pdf.
-
-
-
-
215
-
-
84882120157
-
-
http://www.securityfocus.com/infocus/1618.
-
-
-
-
216
-
-
84882188008
-
-
http://en.wikipedia.org/wiki/Mark_Zbikowski.
-
-
-
-
217
-
-
84882196487
-
-
http://www.techpathways.com/uploads/headersig.txt.
-
-
-
-
218
-
-
84882177186
-
-
http://www.heysoft.de/Frames/f_sw_la_en.htm.
-
-
-
-
219
-
-
84882157041
-
-
http://www.techpathways.com/DesktopDefault.aspx?tabindex=8tabid=14.
-
-
-
-
220
-
-
84882060233
-
-
http://liveview.sourceforge.net/.
-
-
-
-
221
-
-
84882231020
-
-
http://www.mountimage.com/.
-
-
-
-
222
-
-
84882137395
-
-
http://md5deep.sourceforge.net/.
-
-
-
-
223
-
-
84882143556
-
-
http://blogs.technet.com/robert_hensing/default.aspx.
-
-
-
-
224
-
-
84882080084
-
-
http://www.mandiant.com/webhistorian.htm.
-
-
-
-
225
-
-
84882204958
-
-
http://support.microsoft.com/?id=235162.
-
-
-
-
226
-
-
84882121060
-
-
http://www.datarescue.com/idabase/index.htm.
-
-
-
-
227
-
-
84882050041
-
-
http://en.wikipedia.org/wiki/Md5.
-
-
-
-
228
-
-
84882143145
-
-
http://en.wikipedia.org/wiki/Shal.
-
-
-
-
229
-
-
84882110886
-
-
http://ssdeep.source-forge.net/.
-
-
-
-
230
-
-
84882190877
-
-
http://www.dfrws.org/2006/proceedings/12.
-
-
-
-
231
-
-
84882090210
-
-
http://www.microsoft.com/technet/sysinternals/Miscellaneous/Strings.mspx.
-
-
-
-
232
-
-
84882152606
-
-
http://www.mycert.org.my/virusinfo/ie0199.htm.
-
-
-
-
233
-
-
84882156194
-
-
http://msdn.microsoft.com/msdnmag/issues/02/02/PE/.
-
-
-
-
234
-
-
84882099951
-
-
Matt Pietrek's second article on the Win32 portable executable file format is available at
-
Matt Pietrek's second article on the Win32 portable executable file format is available at. http://msdn.microsoft.com/msdnmag/issues/02/03/PE2/.
-
-
-
-
235
-
-
84882132600
-
-
http://www.magma.ca/~wjr/.
-
-
-
-
236
-
-
84882146289
-
-
http://www.microsoft.com/whdc/system/platform/firmware/PECOFF.mspx.
-
-
-
-
237
-
-
84882121094
-
-
http://msdn2.microsoft.com/engb/library/ms680198.aspx.
-
-
-
-
238
-
-
84882168174
-
-
http://en.wikipedia.org/wiki/Mark_Zbikowski.
-
-
-
-
239
-
-
84882158346
-
-
http://msdn2.microsoft.com/engb/library/ms680313.aspx.
-
-
-
-
240
-
-
84882160759
-
-
http://msdn2.microsoft.com/engb/library/ms680339.aspx.
-
-
-
-
241
-
-
84882122135
-
-
http://msdn2.microsoft.com/enus/library/ms680305.aspx.
-
-
-
-
242
-
-
84882218186
-
-
http://msdn2.microsoft.com/enus/library/ms680305.aspx.
-
-
-
-
243
-
-
84882087698
-
-
http://msdn2.microsoft.com/enus/library/ms680341.aspx.
-
-
-
-
244
-
-
84882057573
-
-
http://search.microsoft.com/advancedsearch.aspx?mkt=en.
-
-
-
-
245
-
-
84882151819
-
-
http://www.mirc.com/get.html.
-
-
-
-
246
-
-
84882219217
-
-
http://premium.caribe.net/~adrian2/creations.html.
-
-
-
-
247
-
-
84882059114
-
-
http://homepage.ntlworld.com/chawmp/elitewrap/.
-
-
-
-
248
-
-
84882053911
-
-
http://packetstormsecurity.org/trojans/bo/index3.html.
-
-
-
-
249
-
-
84882094300
-
-
http://www.aspack.com/.
-
-
-
-
250
-
-
84882155134
-
-
http://upx.sourceforge.net/.
-
-
-
-
251
-
-
84882106507
-
-
http://www.fortunecity.com/millenium/firemansam/962/html/procdump.html.
-
-
-
-
252
-
-
84882195332
-
-
http://www.honeynet.org/scans/index.html.
-
-
-
-
253
-
-
84882189946
-
-
http://peid.has.it/.
-
-
-
-
254
-
-
84882150365
-
-
http://www.blackhat.com.
-
-
-
-
255
-
-
84882125357
-
-
http://bochs.sourceforge.net/.
-
-
-
-
256
-
-
84882118402
-
-
http://www.parallels.com/.
-
-
-
-
257
-
-
84882150538
-
-
http://www.microsoft.com/windows/virtualpc/default.mspx.
-
-
-
-
258
-
-
84882100168
-
-
http://www.virtualiron.com/.
-
-
-
-
259
-
-
84882148221
-
-
http://www.xensource.com/xen/.
-
-
-
-
260
-
-
84882172471
-
-
http://www.win41in.com/.
-
-
-
-
261
-
-
84882131306
-
-
http://en.wikipedia.org/wiki/Comparison_of_virtual_machines.
-
-
-
-
262
-
-
84882056343
-
-
Visit, for more information on VMware.
-
Visit, for more information on VMware. http://www.vmware.com.
-
-
-
-
263
-
-
84882052810
-
-
http://isc.sans.org/diary.php?storyid=1871.
-
-
-
-
264
-
-
84882109984
-
-
http://www.symantec.com/home_homeoffice/products/overview.jspPpcid=brpvid=ghost10.
-
-
-
-
265
-
-
84882164243
-
-
http://www.wireshark.org/.
-
-
-
-
266
-
-
84882182525
-
-
http://support.microsoft.com/kb/837243.
-
-
-
-
267
-
-
84882220165
-
-
http://support.microsoft.com/kb/840832/.
-
-
-
-
268
-
-
84882128395
-
-
http://support.microsoft.com/kb/884289.
-
-
-
-
269
-
-
84882090412
-
-
http://insecure.org/nmap/index.html.
-
-
-
-
270
-
-
84882157277
-
-
http://support.microsoft.com/kb/832919.
-
-
-
-
271
-
-
84882180745
-
-
http://www.microsoft.com/technet/sysinternals/FileAndDisk/Filemon.mspx.
-
-
-
-
272
-
-
84882097592
-
-
http://www.microsoft.com/technet/sysinternals/SystemInformation/Regmon.mspx.
-
-
-
-
273
-
-
84882183133
-
-
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/processmonitor.mspx.
-
-
-
-
274
-
-
84882053008
-
-
http://regshot.blog.googlepages.com/regshot.html.
-
-
-
-
275
-
-
84882125602
-
-
http://home.planet.nl/~paOjoz/pc_util.html.
-
-
-
-
276
-
-
84882055526
-
-
http://www.paraglidernc.com/6901.html.
-
-
-
-
277
-
-
84882197503
-
-
http://www.sophos.com.
-
-
-
-
278
-
-
84882082110
-
-
http://en.wikipedia.org/wiki/Rootkit.
-
-
-
-
280
-
-
84882094806
-
-
http://www.blackhat.com.
-
-
-
-
281
-
-
84882132985
-
-
http://www.securiteam.com/securityreviews/5FP0E0AGAC.html.
-
-
-
-
282
-
-
84882224250
-
-
http://pcalsicuro.phpsoft.it/gromozon.pdf.
-
-
-
-
283
-
-
84882067065
-
-
http://www.symantec.com/enterprise/security_response/weblog/2006/08/gromo-zoncom_and_italian_spaghe.html.
-
-
-
-
284
-
-
84882091593
-
-
http://www.uninformed.org/?v=37.
-
-
-
-
285
-
-
84882097229
-
-
http://www.uniformed.org.
-
-
-
-
286
-
-
84882204164
-
-
http://www.symantec.com/avcenter/security/Content/2006.01.10.htm.
-
-
-
-
287
-
-
84882098507
-
-
http://www.virusbtn.com/virusbulletin/archive/2005/12/vb200512-sonys.
-
-
-
-
288
-
-
84882176669
-
-
http://www.symantec.com/avcenter/security/Content/2006.01.10.html.
-
-
-
-
289
-
-
84882174638
-
-
http://www.utica.edu/academic/institutes/ecii/publications/articles/EFE2FC4D.
-
-
-
-
290
-
-
84882180753
-
-
http://www.security.nnov.ru/files/rkdetect.zip.
-
-
-
-
292
-
-
84882189929
-
-
http://www.zeltser.com/.
-
-
-
-
293
-
-
84882198055
-
-
http://isc.sans.org/diary.html?storyid=1487.
-
-
-
-
294
-
-
84882086596
-
-
http://www.microsoft.com/technet/sysinternals/utilities/RootkitRevealer.mspx.
-
-
-
-
295
-
-
84882152814
-
-
http://it.slashdot.org/it/05/02/23/1353258.shtml?tid=172tid=218.
-
-
-
-
296
-
-
84882176271
-
-
http://www.gmer.net/index.php.
-
-
-
-
297
-
-
84882164196
-
-
http://helios.miel-labs.com/.
-
-
-
-
298
-
-
84882059497
-
-
http://research.microsoft.com/.
-
-
-
-
299
-
-
84882095823
-
-
http://research.microsoft.com/rootkit/.
-
-
-
-
300
-
-
84882096434
-
-
http://www.techpathways.com/.
-
-
-
-
301
-
-
84882211180
-
-
http://www.f-secure.com/weblog/archives/archive.
-
-
-
-
302
-
-
84882095983
-
-
http://www.f-secure.com/blacklight/.
-
-
-
-
303
-
-
84882163574
-
-
http://www.sophos.com/products/free-tools/sophos.
-
-
-
-
304
-
-
84882118961
-
-
http://www.mountimage.com.
-
-
-
-
305
-
-
84882153135
-
-
http://www.vmware.com.
-
-
-
-
306
-
-
84882137398
-
-
http://liveview.sourceforge.net/.
-
-
-
-
307
-
-
84882206184
-
-
http://insecure.org/nmap/index.html.
-
-
-
|