Skip to main content

Nailing the Intruder

Computer technology has made fraud/internet crime a growth industry beginning in the 1990s. Incidents of fraud through the use of computers are increasing. In many organizations, anyone with rudimentary knowledge of a company's computer system is capable of illicitly accessing sensitive information--or worse. Estimates indicate that in this year fraud will cost U.S. businesses over half a trillion dollars, with much of that being the result of computer crime. Computer fraud does not only affect a company's bottom line but many company executives and outside directors are learning the hard way that they may be held liable for the lack of internal programs to prevent or minimize the impact of computer fraud. Law enforcement and the courts are grappling with new and difficult problems presented by the success of the Internet. Slowly, they are gaining experience dealing with the problems of detecting, investigating, and prosecuting Internet crime. This paper is an attempt to link the various aspects of evidence relating to computer crime, the sources of such evidence and some tips on how to identify systems compromised and cull out evidence from the same.

632 (PDF, 1.95MB)

24 Jul 2001
ByVinay Disley
Share
All papers are copyrighted

No re-posting of papers is permitted

Related Content

Threat Intelligence-Driven Attack Surface Management

Research Paper

Defenders struggle to keep up with the pace of digital transformation in the face of an expanding...

  • 9 Aug 2022
  • Jonathan Matkowsky

How to Build and Use an Incident Response Playbook Effectively

Research Paper

An effective incident response playbook provides structure and clarity during high-pressure security events.

  • 25 Jul 2022
  • Andreas Seiler

Windows 10 vs. Windows 11, What Has Changed?

Research Paper

Windows 10 was released on July 29, 2015. It has since become the most installed desktop operating...

  • 25 Jul 2022
  • Andrew Rathbun

Malware Function-based encryption technique

Research Paper

Recent malware often uses techniques to evade detection by cybersecurity products. One of the...

  • 22 Jun 2022
  • Hirokazu Murakami

Detecting Unauthorized Behavior From Legitimate Accounts

Research Paper

Incident Responders face an almost insurmountable amount of log events, and the move to the Cloud...

  • 22 Jun 2022
  • Rodney Caudle

Recommendations for small/medium-sized businesses enabling incident response

Research Paper

Security incidents are inevitable. While large businesses can afford security teams to prepare and...

  • 17 Jan 2022
  • Luke Pearson

Cloud Forensics Triage Framework (CFTF)

Research Paper

Digital media forensic investigations come in multiple forms and span single assets - from thumb...

  • 28 Jul 2021
  • Michael Beck

EDR Evasion: Stranger Things In A Payload

Research Paper

Tackling enterprise security has many pitfalls. Yet, the emergence of Endpoint Detection and Response (EDR) products has paved a way for threat hunters to act at scale.

  • 28 Jul 2021
  • Christopher Watson

CIS CSC Controls vs. Ransomware: An Evaluation

Research Paper

Cybercriminals continue to develop and enhance both new and existing ransomware variants, exploiting...

  • 19 May 2021
  • Dylan Malloy

Missing SQLite Records Analysis

Research Paper

This article will specifically discuss the identification of missing records, within the SQLite...

  • 12 Mar 2021
  • Ian Whiffin, Shafik G Punja, Ian Whiffin

Insider Threat The Theft of Intellectual Property in Windows 10

Research Paper

The prevalence of the theft of intellectual property investigations has grown over the past years...

  • 11 Mar 2021
  • Eduard Du Plessis

A Forensic Analysis of the Encrypting File System

Research Paper

EFS or the Encrypting File System is a feature of the New Technology File System (NTFS). EFS...

  • 24 Feb 2021
  • Ramprasad Ramshankar

Tactical Linguistics: Language Analysis in Cyber Threat Intelligence

Research Paper

The capability to effectively collect and analyze data in strategic foreign languages when...

  • 15 Jan 2021
  • Jason Spataro

Practical Process Analysis - Automating Process Log Analysis with PowerShell

Research Paper

Windows event log analysis is an important and often time-consuming part of endpoint forensics. Deep...

  • 29 Dec 2020
  • Matthew Moore

Incident Response in a Security Operation Center

Research Paper

Cybercrime dates back to the late 1700s and remains a threat today. By observing current threats,...

  • 27 Aug 2020
  • Josh Higgason

Applying the Scientific Method to Threat Hunting

Research Paper

Threat hunting is a proactive approach to discover attackers within an organization. Without the use...

  • 28 May 2020
  • Jeremy Kerwin

Tips and Scripts for Reconnaissance and Scanning

Research Paper

Nowadays, information is the key to success. Pentesters' and bounty hunters' first step is to...

  • 12 Feb 2020
  • Zoltan Panczel

Threat Hunting and Incident Response in a post-compromised environment

Research Paper

If you give an attacker 100 days to move freely in your compromised environment, the evidence is...

  • 3 Dec 2019
  • Rukhsar Khan

Exploring the Human Fingerprints on Malware

Research Paper

Much of the focus of cyber threat intelligence is countering adversaries and the tools and...

  • 22 Nov 2019
  • SANS Institute

The Value of Contemporaneous Notes and Why They Are a Requirement for Security Professionals

Research Paper

Contemporaneous notes, or notes taken as soon as practicable after an event or action takes place, are invaluable to analysts in security roles performing activities such as digital forensics and incident response.

  • 30 Sep 2019
  • Seth Enoka

Subscribe to GIAC’s Monthly Newsletter

Receive expert insights, priority access to certifications, essential updates on regulatory changes and industry developments.