This review paper covers the forensic-relevant literature in digital evidence from 2016 to
2019 as a part of the 19th Interpol International Forensic Science Managers Symposium …

Conducting a systematic literature review and comprehensive analysis, this paper surveys
all 135 peer-reviewed articles published at the Digital Forensics Research Conference …

Generating timelines, ie, sorting events by their respective timestamps, is an essential
technique commonly used in digital forensic investigations. But timestamps are not the only …

Previous work has shown that second-hand or even new devices with recycled components
can contain remnants of old data. Given a situation where incriminating evidence is found in …

Digital forensics plays a crucial role in identifying, analysing, and presenting cyber threats as
evidence in a court of law. Artificial intelligence, particularly machine learning and deep …

There is a significant amount of research in digital forensics into analyzing file fragments or
reconstructing fragmented data. At the same time, there are no recent measurements of …

Event construction and sequencing are integral to the digital investigation process to build a
sound case and admissible evidence. When dealing with deleting files, forged files, or file …

This study proposes a method to manipulate fragmentation of disks by arbitrarily allocating
and releasing the status of a disk cluster in the NTFS file system. This method allows …

为解决内存映像中碎片证据文件提取问题, 针对doc, pdf 等常见文件类型, 提出了一种基于内存
映像的碎片文件雕刻模型. 基于该模型, 设计了基于文件对象结构链逆向的碎片文件雕刻算法 …

Temporal analysis is very useful and important for digital forensics for reconstructing the
timeline of digital events. Forgery of a file's timestamp can lead to inconsistencies in the …