This page consists of techniques, resources and contact information
used in computer and hard drive forensic analysis.
If you have a suggestion for additional information you would like to see posted here, please
feel free to contact us.
The information presented here should be used as guidelines only. Please contact appropriate
authorities or seek legal representation before employing any of the techniques listed here.
Digital Forensics Group PROTEX International
Daniel A. Libby http://www.1-800-forensics.org
964 Fifth Ave. Suite 207
San Diego, CA 92101
619 699-5965 (Office)
619 699-5966 (Fax)
619 517-0101 (Direct)
125*132210*17 (Nextel Direct Connect)
ITForensics (AOL IM)
DigitalSource, Inc.
http://www.chrisanders.net
Christopher Anders, CEO.
Digital Forensics - Information Security - Data Recovery
Phone: 718-812-7854
PI-Supply.com
Data Recovery/Computer Forensics
Specialist WWW & Email Investigations
Surveillance/Close Protectiob/CQB Training http://www.PI-Supply.com
George Mhanna
1300 E. Edinger Ave.
Santa Ana, CA 92705
(714) 543-5011
Investigative Security Services
Ralph V. Frasca Jr.
1212 66th Street North
St. Petersburg, FL 33710
Phone: 727-797-6545
Direct: 727-771-9174
Cell: 727-643-4605
E-Fax: 603-804-8517
License # A2400269
License # B2400210 http://www.grandiss.com
Brian T. Wolfinger
Director - Technical and Consulting Services
Direct Phone (215) 869-9915
Direct Fax (866) 240-2580
bwolfinger@corediscovery.com
http://www.corediscovery.com
Corporate Risks New Zealand (SI) Ltd
John Dierckx
PO Box 666 Christchurch
New Zealand
Tel 0064 (0)3 3658612
Mob 0064 (0)27 4803371
High Tech Crime Institute
Tom Eskridge
28100 US Hwy 19 N
Suite 204
Clearwater, Florida 33761
727-499-7200
888-300-9789
Anti-Hacker Toolkit Forensic Analysis of a Compaq RAID-1 Array and Using
dd with EnCase v3.
X-Ways.Net
advanced computer examination and data recovery software.
http://www.ultimatebootcd.com -
When you boot up from the CD, a text-based menu will be displayed, and you will
be able to select the tool you want to run. The selected tool actually boots off a
virtual floppy disk created in memory.
*WHOA does not endorse any of the techniques listed here. We list them as
possible sources for help for those who have been harassed online. We have included the information
as provided to us, and are not responsible for any errors or ommissions. As always, get a written
contract with any professional with whom you do business. Make sure that you have thoroughly read
and understood any contract before signing it.