@port139 Blog

基本的にはデジタル・フォレンジックの技術について取り扱っていますが、記載内容には高確率で誤りが含まれる可能性があります。

Web Forensics関連 参考URL(順番に特に意味なし)

□Web Forensics
http://sci.tamucc.edu/~cams/projects/345.pdf

□BROWSER FORENSICS
http://www.browserforensics.com/

□Category Archives: Browser Forensics
http://davidkoepi.wordpress.com/category/browser-forensics/

□Web Browser Forensics
https://code.google.com/p/winforensicaanalysis/wiki/WebBrowserForensics

Internet Explorer Forensics:Reconstructing Internet Activity Using Pasco and Galleta
https://www.google.co.jp/url?sa=t&rct=j&q=&esrc=s&source=web&cd=5&cad=rja&ved=0CE4QFjAE&url=http%3A%2F%2F8bits.googlecode.com%2Ffiles%2Ftproject.doc&ei=NCgUUuuNI4LDlAXFu4DgCg&usg=AFQjCNHAJBLyq40HyxV1vIkZMHWz0f7ZUQ&sig2=orKbS2v0qHgFd8I3RJerVQ

Google Chrome Browser | Forensic Artifacts
http://forensicartifacts.com/tag/google-chrome-browser/

□Forensic Analysis of IE Activity Files
http://www.mcafee.com/us/resources/white-papers/foundstone/wp-pasco.pdf

□Web Browser Forensics, Part 1 and 2
http://www.symantec.com/connect/articles/web-browser-forensics-part-1
http://www.symantec.com/connect/articles/web-browser-forensics-part-2

Internet Explorer RecoveryStore (aka Travelog) as evidence of Internet Browsing activity
http://www.swiftforensics.com/2011/09/internet-explorer-recoverystore-aka.html

Facebook Search History
http://linuxsleuthing.blogspot.jp/2012/09/facebook-search-history.html

Internet Explorer History File Format
http://www.forensicswiki.org/wiki/Internet_Explorer_History_File_Format

□Advanced - Evidence in Encase -- Internet Explorer (InPrivate)
http://www.youtube.com/watch?v=hR1SkNCyKIU

Microsoft Internet Explorer PrivacIE Entries
http://blog.digital-detective.co.uk/2010/04/microsoft-internet-explorer-privacie.html

□Web Forensics
http://www.jessland.net/docs/Jess_Garcia-Web_Forensics.pdf

□Computer Forensic Software for Windows
http://www.nirsoft.net/computer_forensic_software.html

□Private Browsing Forensics
http://computerforensics.champlain.edu/sites/default/files/files/privateBrowsingBlogPT2.pdf

□WebMail Forensics - Black Hat
http://www.blackhat.com/presentations/bh-usa-03/bh-us-03-akin.pdf

□Do Private and Portable Web Browsers Leave Incriminating Evidence?
http://www.ieee-security.org/TC/SPW2013/papers/data/5017a135.pdf

□Browser Stuff
http://windowsir.blogspot.jp/2010/01/browser-stuff.html

□Browser Artifact Analysis
http://windowsir.blogspot.jp/2008/08/browser-artifact-analysis.html

□Web Browser Session Restore Forensics
http://computerforensics.parsonage.co.uk/downloads/WebBrowserSessionRestoreForensics.pdf

□Web Browser Session Restore Forensics
http://forensicsfromthesausagefactory.blogspot.jp/2010/01/web-browser-session-restore-forensics.html

Google Toolbar Search Artifacts
http://paradigmsolutions.files.wordpress.com/2009/12/google2e-web.pdf

□BinMode: IE Index.dat
http://windowsir.blogspot.jp/2013/03/binmode-ie-indexdat.html

Android Browser Forensics
http://forensicsferret.wordpress.com/2010/09/30/android-browser-forensics/

□Browser Artifact Recovery Forensic Framework (BARFF)
https://code.google.com/p/barff/
http://sysforensics.org/2012/11/browser-artifact-recovery-forensic-framework-barff.html

□Browser Forensics using TLN timelines
http://sploited.blogspot.jp/2012/07/browser-forensics-using-tln-timelines.html

□Advanced Evidence Collection and Analysis of Web Browser Activity
http://www.dfrws.org/2011/proceedings/Junghoon_Oh_Advanced_Evidence_Collection_and_Analysis_of_Web_Browser_Activity.pdf

□Forensic Analysis of Firefox Web Browser Settings on a Mac
https://www.blackbagtech.com/blog/2011/11/03/forensic-analysis-of-firefox-web-browser-settings-on-a-mac

□Browser forensics - SlideShare
http://www.slideshare.net/boonlia/browser-forensics

□Web Browser Cookie Forensics
https://www.grc.com/cookies/forensics.htm?uqydhabxykgzf

Firefox 4 Browser Forensics, Part 1 to 4
http://renaissancesecurity.blogspot.jp/search/label/firefox%204

□Browser Forensics
http://www.sandwichsecurity.com/content/browser_forensics.pdf

Firefox Cache Format and Extraction
http://articles.forensicfocus.com/2012/03/09/firefox-cache-format-and-extraction/

□An Analysis of Private Browsing Modes in Modern Browsers
http://www.collinjackson.com/research/private-browsing.pdf

□Analyzing Apple Safari Artifacts
http://www.appleexaminer.com/MacsAndOS/Analysis/HowTo/SafariBrowserAnalysis/SafariBrowserAnalysis.html

□Challenge 2 of the Forensic Challenge 2010 - browsers under attack
http://www.honeynet.org/challenges/2010_2_browsers_under_attack

□Forensic Analysis of Web Browser with Dual Layout Engine
http://secmeeting.ihep.ac.cn/paper/Slides_Linda_ICDFI2012.pdf

□Internet Forensics
http://www.utica.edu/faculty_staff/qma/InternetForensics.pdf

□Forensic Analysis of Private Browsing Mode in Popular Browsers
http://www.mocktest.net/paper.pdf

Safari browser cache - examination of Cache.db
http://forensicsfromthesausagefactory.blogspot.jp/2010/06/safari-browser-cache-examination-of.html

Big Brother Forensics: Device Tracking Using Browser-Based Artifacts
http://www.the-techbox.com/analysis/big-brother-forensics-device-tracking-using-browser-based-artifacts/

Mozilla Firefox Forensics
http://www.dfinews.com/articles/2012/09/mozilla-firefox-forensics#.UhVh49IRKiw

Mozilla Firefox Forensics: Part 2-4
http://www.forensicmag.com/articles/2012/12/mozilla-firefox-forensics-part-2
http://www.forensicmag.com/articles/2013/02/mozilla-firefox-forensics-part-3
http://www.forensicmag.com/articles/2013/04/mozilla-firefox-forensics-part-4

□Forensic implications of a person using Firefox’s “Private Browsing”
http://www.magnetforensics.com/forensic-implications-of-a-person-using-firefoxs-private-browsing/

□How Private is Internet Explorer’s InPrivate Browsing?…First define “private”
http://www.magnetforensics.com/how-private-is-internet-explorers-inprivate-browsing-first-define-private/

□How does Chrome’s ‘incognito’ mode affect digital forensics?
http://www.magnetforensics.com/how-does-chromes-incognito-mode-affect-digital-forensics/