Category "Side notes"
Peter Kankowski has released an improved template for EXE- files to be used with Sweetscape's 010 Editor. This template also allows to parse 64bit binaries. For the first time the template recognizes the "Rich" header inserted into binaries by Microsoft's linkers.
MANDIANT First Response is a free software to perform a live investigation locally or over the network. So it could be interesting to deploy the program in an enterprise environment.
Finally digital forensics has got a Wiki of its own, Simson Garfinkel set it up recently. Until now about 70 authors registered and created just under 40 pages. To make the Wiki grow Garfinkel asks the forensic community for contributions.
Guidance Software Inc. recently published the November 2005 edition of its EnCase Legal Journal. The journal covers US courts decisions involving EnCase software and digital forensics in general. It is available free of charge.
