S
SANS (SysAdmin, Audit, Network, Security)
Reading Room, 230
web site, 15, 16
Sarbanes-Oxley Act, 10, 15
Sassinsky Data Services, 250
SAVEFS development kit, 108
scanner, as clue to scanned documents, 75
Scientific Working Group on Digital Evidence, 249
scope of investigation, 76
search and seizure, 58-60
guidelines, 44-45
search warrant , 59-60 , 271
subpoena, 59
voluntary surrender, 58-59
search warrant, 59-60 , 271
Searching and Seizing Computers and Obtaining Electronic Evidence... manual, 198
Second/Third Extended Filesystems (ext2/ext3), 40, 271
security
awareness, 16-18
passwords and, 141
Security Accounts Manager, 128
security incident, 52. See also incidents
security policies, 9, 271
Security University, Advanced Information Security (AIS) certification, 254
shutdown of computer, and data loss, 81, 103
signature analysis, 130, 272
Simple Mail Transfer Protocol (SMTP), 125
simplicity in testimony, 92 , 234-235
feedback, 235
presentation aids, 234-235
for technical concepts, 234
slack space, 135-136, 272
Sleuth Kit (TSK), 180-181 , 251
SMART, 170 , 170-171 , 250
SnapBack, 250
DatArrest Forensic Suite, 114
social engineering, 16-17, 272
to obtain encryption key, 155
to obtain passwords, 141
software, encryption by, 155
software suites
AccessData Ultimate Toolkit (UTK), 261
Forensicware, 262
Maresware, 261-262
X-Ways Forensics, 262
software write blocker, 69, 70
sorter tool (Sleuth Kit), 180
sound files, steganography and, 151
spanning across multiple discs, 105, 272
Spartans, encryption by, 146
Spinelli Corporation, 250
spread-spectrum frequency hopping , 34
static data support, in EnCase, 165
static electricity discharge , 81
steganography, 133, 151-152 , 272
Steganos Security Suite, 152
storytelling approach to presenting evidence, 233
strategy of case, understanding, 225
substitution cipher, 147, 272
Sun Microsystems, Network File System (NFS), 40, 271
super block in HPFS, 39-40
supercomputers, encryption key cracking, 153
Symantec, Norton Ghost, 168 , 250
symmetric algorithm, 148 , 148-149, 272
system files, on bootable floppy, 103