Generalizing sources of live network evidence

A hardware-based memory acquisition procedure for digital investigations

Brian D. Carrier, Joe Grand · Digital Investigation · 2004 · 190 citations

Engineering, Computer Engineering, Computer Science +10

Defining Digital Forensic Examination and Analysis Tool Using Abstraction Layers.

Brian D. Carrier · International journal of digital evidence · 2003 · 168 citations

Computing, Information Technology, Data Engineering +15

Searching and Seizing Computers and Obtaining Electronic Evidence in Criminal Investigations

H. Marshall Jarrett, Michael W. Bailie, Ed Hagen · University of North Texas Digital Library (University of North Texas) · 1979 · 95 citations · Full text

Computing, Computer Science, Criminal Law +13

Intrusion detection systems as evidence

Peter Sommer · Computer Networks · 1999 · 89 citations

Computing, Computer Engineering, Computer Science +12

Network traffic as a source of evidence: tool strengths, weaknesses, and future needs

Eoghan Casey · Digital Investigation · 2004 · 80 citations

Computing, Information Technology, Computer Networks +13