University of Delaware Police    Contact us  

   Cyber Crime Investigations Resource Site

    Resources for Investigators and Victims . . . .

     "In the business of computer forensics, excellence is not an option; it is an operational necessity."

University of Delaware Police Computer Forensics Lab Resource Site

University Police Home Page

University Police Technology Page

Other Useful Links:

Computer Security Incidents - CERT

Delaware Code

DOJ Search Warrant Guidelines 

High Tech Crime Consortium

High Tech Crime Network

Identity Theft: US Government Site

Internet Fraud Complaint Center

Internet Hoaxbusters

Internet Service Providers Contact List - Contact Info for Service of Process - updated April 2005!

National White Collar Crime Center

Sam Spade Internet Tracing Tools

Time Zones - Sorting Out the Time Stamps 

Urban Legends: Fact or Hoax

Virus Information Library- McAfee

Current Homeland Security Threat Level:

Access Data Training

Guidance Software Training Calendar

High Tech Crime Institute

National White Collar Crime Center Training Calendar

Paraben Training Calendar

Advance Fee Frauds, 419 Scams, Nigerian Emails Seeking Refuge for Funds in US - These frauds typically begin with a letter from someone appearing to be an official from Nigeria.  They urgently seek your assistance in seeking a refuge for funds in the US.  You are being asked to help out for a cut of the action. 

ISP's - What are they?  How to serve a subpoena, court order, or search warrant on an ISP - This section describes what an ISP is, what kind of information you can get with a particular process.  AOL contact information is highlighted.  A complete reference to all known ISP's and their contact information can be found here as well. 

Understanding IP addresses, email headers, and how to display, copy, and send email headers.  A pretty good and concise explanation of IP addresses and the ins and outs of email headers.  A table is included that describes how to display headers in a few email client software packages (not as complete as the following page).  In addition to displaying the headers, this gives instructions for copying and pasting headers and content and forwarding to the investigator.  Combine this document with the complete list in the following page and you have a pretty good resource for handling most email investigations.

Viewing Email Headers in the following Email Software Clients:  AOL Email, Compuserve, Eudora Pro, Excite Webmail, Free Agent/Agent, Hotmail, Juno Version 4+, Lotus Notes 4.6 (Win 9x client), Microsoft Exchange, Microsoft Internet Explorer, Microsoft Internet News, Microsoft Outlook 98 and Outlook 2000, Microsoft Outlook Express 5, Netscape Messenger, Netscape News, Newswatcher, Operamail, Pegasus, Pine, Unix, and WebTV.

ebay Investigations:  Frauds on ebay abound!  Also ebay is being used with increasing frequency for fencing stolen property. Information can be obtained via subpoena from ebay listing seller or buyer information and transactions. 

Suspect a trojan?  Here's an explanation of the trojan, how it works, how to avoid being trojanized, and possible symptoms of a trojan.  There is also a diagnostic tool to run on the victim's computer and to send to me for analysis.  It creates a snapshot of the victim's critical system files and certain registry entries where trojans are known to "hide".  Most often, but not always, a trojan can be detected from this system snapshot.