Preface;
Who This Book Is For;
Contents of This Book;
Conventions Used in This Book;
Safari Enabled;
Using Code Examples;
How to Contact Us;
Acknowledgments;
Chapter 1: Introduction;
1.1 What Is Internet Forensics?;
1.2 The Seamy Underbelly of the Internet;
1.3 Pulling Back the Curtain;
1.4 Taking Back Our Internet;
1.5 Protecting Your Privacy;
1.6 Before You Begin;
1.7 A Network Neighborhood Watch;
Chapter 2: Names and Numbers;
2.1 Addresses on the Internet;
2.2 Internet Address Tools;
2.3 DNS Record Manipulation;
2.4 An Example-Dissecting a Spam Network;
Chapter 3: Email;
3.1 Message Headers;
3.2 Forged Headers;
3.3 Forging Your Own Headers;
3.4 Tracking the Spammer;
3.5 Viruses, Worms, and Spam;
3.6 Message Attachments;
3.7 Message Content;
3.8 Is It Really Spam?;
Chapter 4: Obfuscation;
4.1 Anatomy of a URL;
4.2 IP Addresses in URLs;
4.3 Usernames in URLs;
4.4 Encoding the Entire Message;
4.5 Similar Domain Names;
4.6 Making a Form Look Like a URL;
4.7 Bait and Switch-URL Redirection;
4.8 JavaScript;
4.9 Browsers and Obfuscation;
Chapter 5: Web Sites;
5.1 Capturing Web Pages;
5.2 Viewing HTML Source;
5.3 Comparing Pages;
5.4 Non-Interactive Downloads Using wget;
5.5 Mapping Out the Entire Web Site;
5.6 Hidden Directories;
5.7 In-Depth Example-Directory Listings;
5.8 Dynamic Web Pages;
5.9 Filling Out Forms;
5.10 In-Depth Example-Server-Side Database;
5.11 Opening the Black Box;
Chapter 6: Web Servers;
6.1 Viewing HTTP Headers;
6.2 What Can Headers Tell Us?;
6.3 Cookies;
6.4 Redirection;
6.5 Web Server Statistics;
6.6 Controlling HTTP Headers;
6.7 A Little Bit of Everything;
Chapter 7: Web Browsers;
7.1 What Your Browser Reveals;
7.2 Apache Web Server Logging;
7.3 Server Log Analysis;
7.4 Protecting Your Privacy;
Chapter 8: File Contents;
8.1 Word Document Metadata;
8.2 U.K. Government Dossier on Iraq;
8.3 Document Forgery;
8.4 Redaction of Sensitive Information;
Chapter 9: People and Places;
9.1 Geographic Location;
9.2 Time Zone;
9.3 Language;
9.4 Expertise;
9.5 Criminal or Victim?;
9.6 Hardware and Software;
Chapter 10: Patterns of Activity;
10.1 Signatures;
10.2 Searching with Signatures;
10.3 Problems with Simple Signatures;
10.4 Full Text Comparison;
10.5 Using Internet Search Engines for Patterns;
Chapter 11: Case Studies;
11.1 Case Study 1: Tidball;
11.2 Case Study 2: Spam Networks;
Chapter 12: Taking Action;
12.1 What Is Being Done to Tackle Internet Fraud?;
12.2 What You Can Do to Help;
12.3 Getting in Over Your Head;
12.4 Vision of a Community Response;
About the Author;
Colophon;
