[HTML][HTML] Using ntfs cluster allocation behavior to find the location of user data

M Karresand, S Axelsson, GO Dyrkolbotn - Digital Investigation, 2019 - Elsevier
Digital forensics is heavily affected by the large and increasing amount of data to be
processed. To solve the problem there is ongoing research to find more efficient carving …

Developing software signature search engines using paragraph vector model: a triage approach for digital forensics

S Soltani, SAH Seno, R Budiarto - IEEE Access, 2021 - ieeexplore.ieee.org
Today, with the growth of information and communication technology, digital crimes have
also spread. Advanced storage technologies and their low cost have led to a significant …

[HTML][HTML] An empirical study of the ntfs cluster allocation behavior over time

M Karresand, GO Dyrkolbotn, S Axelsson - Forensic Science International …, 2020 - Elsevier
The amount of data to be handled in digital forensic investigations is continuously
increasing, while the tools and processes used are not developed accordingly. This …

Detecting the software usage on a compromised system: A triage solution for digital forensics

S Soltani, SAH Seno - Forensic Science International: Digital Investigation, 2023 - Elsevier
One of the challenges of digital forensics is the high volume of investigative cases. To
address this problem, researchers have proposed various triage methods. Detecting the …

A method and implementation for the empirical study of deleted file persistence in digital devices and media

JH Jones, TM Khan - 2017 IEEE 7th Annual Computing and …, 2017 - ieeexplore.ieee.org
Digital devices are ubiquitous in modern society. Every action on a digital device, whether
initiated by a user, an application, the operating system, or hardware, leaves behind …

Creating a map of user data in NTFS to improve file carving

M Karresand, A Warnqvist, D Lindahl… - Advances in Digital …, 2019 - Springer
Digital forensics and, especially, file carving are burdened by the large amounts of data that
need to be processed. Attempts to solve this problem include efficient carving algorithms …

Assessing the Impact of Matched Fragments' Relative Locations on Application Artifact Inference

O Adegbehingbe, JH Jones - 2023 IEEE 13th Annual …, 2023 - ieeexplore.ieee.org
One challenge in digital forensics is finding evidence of applications that have been
uninstalled. When an application is uninstalled, the files making up the application are …

[图书][B] Software signature derivation from sequential digital forensic analysis

AJ Nelson - 2016 - search.proquest.com
Hierarchical storage system namespaces are notorious for their immense size, which is a
significant hindrance for any computer inspection. File systems for computers start with tens …

Improving Application Artifact Inference Using Matched Sector Adjacency Weighting

O Adegbehingbe, JH Jones - Proceedings of the 9th ACM International …, 2023 - dl.acm.org
Digital forensics investigators may need to infer the past presence of an application which
was uninstalled prior to device seizure or media imaging. Some existing approaches use a …

Factors Affecting the Persistence of Deleted Files on Digital Storage Devices

TM Khan, JH Jones Jr, AV Mbazirra - Future of Information and …, 2023 - Springer
There is limited research addressing the factors that contribute to the persistence of deleted
file contents on digital storage devices. This study presents a digital file persistence …