First Responders Guide to Computer Forensics: Advanced Topics
• SEI Report
Publisher
Software Engineering Institute
CMU/SEI Report Number
CMU/SEI-2005-HB-003DOI (Digital Object Identifier)
10.1184/R1/6573842.v1Abstract
This handbook expands on the technical material presented in SEI handbook CMU/SEI-2005-HB-001, First Responders Guide to Computer Forensics. While the latter presented techniques for forensically sound collection of data and explained the fundamentals of admissibility pertaining to electronic files, this handbook covers more advanced technical operations such as process characterization and spoofed email. It describes advanced methodologies, tools, and procedures for applying computer forensics when performing routine log file reviews, network alert verifications, and other routine interactions with systems and networks. The material will help system and network professionals to safely preserve technical information related to network alerts and other security issues.
Part of a Collection
Resources for Collecting Evidence and Forensics
Cite This SEI Report
Nolan, R., Baker, M., Branson, J., Hammerstein, J., Rush, K., Waits, C., & Schweinsberg, E. (2005, September 1). First Responders Guide to Computer Forensics: Advanced Topics. (SEI Report CMU/SEI-2005-HB-003). Retrieved August 10, 2026, from https://doi.org/10.1184/R1/6573842.v1.
@techreport{nolan_2005,
author={Nolan, Richard and Baker, Marie and Branson, Jake and Hammerstein, Josh and Rush, Kristopher and Waits, Cal and Schweinsberg, Elizabeth},
title={First Responders Guide to Computer Forensics: Advanced Topics},
month={Sep},
year={2005},
number={{CMU/SEI-2005-HB-003},
institution={Software Engineering Institute, Carnegie Mellon University},
doi={10.1184/R1/6573842.v1},
url={https://doi.org/10.1184/R1/6573842.v1},
note={Accessed: 2026-Aug-10}
}
Nolan, Richard, Marie Baker, Jake Branson, Josh Hammerstein, Kristopher Rush, Cal Waits, and Elizabeth Schweinsberg. "First Responders Guide to Computer Forensics: Advanced Topics." (CMU/SEI-2005-HB-003). Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, September 1, 2005. https://doi.org/10.1184/R1/6573842.v1.
R. Nolan, M. Baker, J. Branson, J. Hammerstein, K. Rush, C. Waits, and E. Schweinsberg, "First Responders Guide to Computer Forensics: Advanced Topics," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, SEI Report CMU/SEI-2005-HB-003, 1-Sep-2005 [Online]. Available: https://doi.org/10.1184/R1/6573842.v1. [Accessed: 10-Aug-2026].
Nolan, Richard, Marie Baker, Jake Branson, Josh Hammerstein, Kristopher Rush, Cal Waits, and Elizabeth Schweinsberg. "First Responders Guide to Computer Forensics: Advanced Topics." (SEI Report CMU/SEI-2005-HB-003). Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 1 Sep. 2005. https://doi.org/10.1184/R1/6573842.v1. Accessed 10 Aug. 2026.
Nolan, Richard; Baker, Marie; Branson, Jake; Hammerstein, Josh; Rush, Kristopher; Waits, Cal; & Schweinsberg, Elizabeth. First Responders Guide to Computer Forensics: Advanced Topics. CMU/SEI-2005-HB-003. Software Engineering Institute. 2005. DOI: 10.1184/R1/6573842.v1. https://doi.org/10.1184/R1/6573842.v1