Chapter 22 ©2011 Eoghan Casey. Published by Elsevier Inc. All rights reserved. Applying Forensic Science to Networks

Figure 1.1 Copyright © 2011 Academic Press Inc.©2011 Eoghan Casey. Published by Elsevier Inc. All rights reserved. FIGURE 22.1 Search circles that may contain digital evidence.

Figure 1.1 Copyright © 2011 Academic Press Inc.©2011 Eoghan Casey. Published by Elsevier Inc. All rights reserved. FIGURE 22.2 Sample digital evidence map.

Figure 1.1 Copyright © 2011 Academic Press Inc.©2011 Eoghan Casey. Published by Elsevier Inc. All rights reserved. FIGURE 22.3 Hyper Terminal has the capability to record the results of a router examination in a file. The “Capture Text” option is on the “Transfer” menu.

Figure 1.1 Copyright © 2011 Academic Press Inc.©2011 Eoghan Casey. Published by Elsevier Inc. All rights reserved. FIGURE 22.4 Ethereal ( used to reconstruct a TCP stream relating to one component of a Web page being downloaded.

Figure 1.1 Copyright © 2011 Academic Press Inc.©2011 Eoghan Casey. Published by Elsevier Inc. All rights reserved. FIGURE 22.5 Network traffic depicted in IP address-IP address connections creating a circular mesh using NetIntercept.

Figure 1.1 Copyright © 2011 Academic Press Inc.©2011 Eoghan Casey. Published by Elsevier Inc. All rights reserved. FIGURE 22.6 VPN connection makes an offender in California appear to be in Connecticut, throwing investigators off track and giving the victim a false sense of security.