The following are peer reviewed publications which I have authored or collaborated in:
Schatz, B. (2007) 'BodySnatcher: towards reliable volatile memory acquisition by software', to be presented at the 2007 Digital Forensics Workshop, Pittsburgh, PA.
Schatz, B., Mohay, G. and Clark, A., (2006) 'Establishing temporal provenance of computer event log evidence' Digital Investigation, 3 (Supplement 1), pp. 89-107. [PDF]
Schatz, B., Clark, A., (2006) 'An information architecture for digital evidence integration' Proceedings of the 2006 Australian Security Response Team Annual Conference (AUSCERT 2006), Gold Coast, Australia.[PDF]
S. Andersson, A. J. Clark, G. Mohay, B. Schatz and J. Zimmermann. Framework for Detecting Network-Based Code Injection Attacks Targeting Windows and UNIX. In proceedings of Twenty-first Annual Computer Security Applications Conference, pages 41--50. IEEE Computer Society, December 2005. ISBN: 0-7695-2461-3.
Schatz, B., Mohay, G. and Clark, A., (2004) 'Generalising Event Forensics Across Multiple Domains' Proceedings of the 2004 Australian Computer Network and Information Forensics Conference (ACNIFC 2004), Perth, Australia. [PDF]
Schatz, B., Mohay, G. and Clark, A., (2005) 'Generalising Event Correlation Across Multiple Domains', Journal of Information Warfare, vol 4, iss 1, pp. 69-79.
Schatz, B., Mohay, G. and Clark, A. (2004) 'Rich Event Representation for Computer Forensics', Proceedings of the 2004 Asia Pacific Industrial Engineering and Management Systems (APIEMS 2004), Brisbane, Australia.