Seminar Schedule

#	Week	Day	Date	Time	Room	Module	Theme	Literature	Responsible
F0	3	Fri	070119	13.00-14.30	12A 424	-	Introduction	-	Stefan Lindskog
F1	5	Fri	070202	10.30-12.00	12A 424	M1	Foundations	Chapter 1-4 + Appendix A in FSFA	Leonardo A. Martucci
F2	5	Fri	070202	13.00-14.30	12A 424	M1	Volume Analysis	Chapter 5-7 in FSFA	Reine Lundin
F3	8	Fri	070223	10.30-12.00	12A 424	M1	FAT	Chapter 8-10 in FSFA	Ulf Larson
F4	8	Fri	070223	13.00-14.30	12A 424	M1	EXT2/3	Chapter 14-15 in FSFA	Per Hurtig
F5	9	Fri	070302	10.30-12.00	12A 424	M1	NTFS	Chapter 11-13 in FSFA	Hans Hedbom
F6	9	Fri	070302	13.00-14.30	12A 424	M1	UFS + Oscar	Chapter 16-17 in FSFA + Oscar1 & 2	Christer Andersson
F7	11	Fri	070316	10.30-12.00	12A 424	M2	Live Incident Response	Chapter 1-3 in RDF	Dennis Nilsson
F8	11	Fri	070316	13.00-14.30	12A 424	M2	Networked-Based Forensics	Chapter 4-7 in RDF	Presented by: Ulf Larson
F9	16	Fri	070420	10.30-12.00	12A 424	M2	Forensics Analysis Techniques I	Chapter 8-11 in RDF	Presented by: Dennis Nilsson
F10	16	Fri	070420	13.00-14.30	12A 424	M3	Forensics Analysis Techniques II	Chapter 12-14 in RDF	Presented by: Ulf Larson
F11	18	Fri	070504	10.30-12.00	12A 424	M3	Mobile Device Forensics (Part VI), Online-Based Forensics (Part VII), and Memory Analysis	-	Christer Andersson, Ulf Larson, and Per Hurtig
F12	18	Fri	070504	13.00-14.30	12A 424	M3	Wireless Forensics, Automobile Forensics, and Real Server Forensics	-	Leonardo A. Martucci, Dennis Nilsson, and Hans Hedbom

Literature

FSFA = B. Carrier. File System Forensics Analysis. Addison-Wesley, Upper Saddle River, NJ, USA, 2005.

Oscar1 = M. Karresand and N. Shahmehri. Oscar – File Type Identification of Binary Data in Disk Clusters and RAM Pages. In Proceedings of IFIP TC-11 International Information Security Conference (IFIP/SEC 2006), Volume 21, Pages 413-424, Karlstad, Sweden, 2006. Springer, New York, NY, USA.

Oscar2 = M. Karresand and N. Shahmehri. Oscar – Using Byte Pairs to Find File Type and Camera Make of Data Fragments. In Proceedings of the Annual Workshop on Digital Forensics and Incident Analysis, Volume 1, Pages 85-94, Pontypridd, Wales, UK, 2006. Springer-Verlag, London, UK.

RDF = K. J. Jones, R. Bejtlich, and C. W. Rose. Real Digital Forensics: Computer Security and incident Response. Addison-Wesley, Upper Saddle River, NJ, USA, 2006.