Publications in the digital forensics domain frequently come with tools–a small piece of
functional software. These tools are often released to the public for others to reproduce …

Advances in malware development have led to the widespread use of attacker toolkits that
do not leave any trace in the local filesystem. This negatively impacts traditional investigative …

Keyloggers are a form of spyware that monitors the activities carried out on a computer
system and stores sensitive information such as the keystrokes made by the user and stores …

The forensic study of mobile apps that use application-level encryption requires the
decryption of the data they generate. Such a decryption requires the knowledge of the …

Tracing the sequence of library calls and system calls that a program makes is very helpful
to characterize its interactions with the surrounding environment and, ultimately, its …

V8 is the open source interpreter developed by Google to enable JavaScript (JS)
functionality in Chrome and power other software. Malicious threat actors abuse the usage …

Forensic analysis of mobile applications plays a crucial part in gathering evidence against
criminals. Because the evidence data obtained may often be stored in an encrypted local …

Memory forensics plays a crucial role for the analysis of sophisticated malware, especially
with memory-only variants, and has in the past extended its capabilities for detecting various …

Over the last decade, userland memory forensics techniques and algorithms have gained
popularity among practitioners, as they have proven to be useful in real forensics and …

Due to the growing significance of the Internet in many facets of our lives, the World Wide
Web, which end-users access via web browsers, is evolving into the next platform for those …