A major challenge to digital forensic analysis is the ongoing growth in the volume of data
seized and presented for analysis. This is a result of the continuing development of storage …

Digital forensics is the process of employing scientific principles and processes to analyze
electronically stored information and determine the sequence of events which led to a …

Event logs are one of the most important sources of digital evidence for forensic
investigation because they record essential activities on the system. In this paper, we …

Having a clear view of events that occurred over time is a difficult objective to achieve in
digital investigations (DI). Event reconstruction, which allows investigators to understand the …

The dramatic growth of storage capacity and network bandwidth is making it increasingly
difficult for forensic examiners to report what is present on a piece of subject media. Instead …

Timestamps have proven to be an expedient source of evidence for examiners in the
reconstruction of computer crimes. Consequently, active adversaries and malware have …

Publishing data from IoT devices raises concerns of leaking sensitive information. In this
paper we consider the scenario of publishing data on events with timestamps. We formulate …

Timestamps stored on digital media play an important role in digital investigations. However,
the evidentiary value of timestamps is questionable because timestamps can be …

Timestamps play a substantial role during digital forensic investigations and address two
main objectives. First, they serve as a primary culling criterion to reduce the amount of digital …

In this article, three main approaches to situate forensic traces in time were revisited under
the prism of the Sydney Declaration and adapted to be applicable to a large range of …