取证学习资料DVD

http://www.infiniteskills.com/training/learning-computer-forensics.html
https://www.youtube.com/watch?v=nxpu7ZeK2fM https://www.youtube.com/results?search_query=linux+forensics https://www.youtube.com/watch?v=r9Ctji9djxI https://www.youtube.com/user/robtlee73/videos http://www.e-fense.com/helix3pro.php https://www.youtube.com/watch?v=zYYCv21I-1I&feature=youtu.be https://www.youtube.com/watch?v=BVo0TTEa9Dc
取证工具:
https://github.com/volatilityfoundation/volatility https://www.mandiant.com/resources/download/redline http://cert.at/downloads/software/densityscout_en.html http://rjhansen.github.io/nsrllookup/ https://github.com/dkovar/anal https://www.e-fense.com/store/index.php?_a=viewProd&productId=14 http://www.volatilityfoundation.org/#!24/c12wa https://github.com/sleuthkit/sleuthkit/tree/develop/man
文档:
http://www.freebuf.com/articles/system/26763.html http://drops.wooyun.org/papers/2854

http://www.forensicswiki.org/wiki/Tools%3aMemory_Imaging#Linux

http://technet.microsoft.com/en-us/sysinternals/bb897441.aspx http://betanews.com/2013/10/28/check-unsigned-files-at-virustotal-with-sysinternals-sigcheck/ http://staff.washington.edu/dittrich/misc/forensics/
要购买的书籍:
http://www.amazon.com/s/ref=sr_pg_2?rh=n%3A283155%2Cn%3A5%2Ck%3AForensics&page=2&keywords=Forensics&ie=UTF8&qid=1412253572
the art of Memory Forensics: Detecting Malware and Threats in Windows, Linux, and Mac Memory
http://www.itpub.net/thread-1713816-1-1.html
windows forensic analysis toolkit fourth edition advanced analysis techniques for windows 8 pdf