Time based data forensic and cross-reference analysis

Proceedings of the ACM Symposium on Applied Computing

Volumn , Issue , 2011, Pages 185-190

  Ding, Xiaoqin ^a   Zou, Hengming ^a  

^a SHANGHAI JIAO TONG UNIVERSITY   (China)

Author keywords

anti forensics; data forensics; NTFS; temporal evidence

Indexed keywords

ANTI-FORENSICS; DATA FORENSICS; FORENSIC INVESTIGATION; NTFS; TEMPORAL EVIDENCE; TIME INFORMATION; TIME STAMPS;

METADATA;

COMPUTER CRIME;

EID: 79959304658     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1982185.1982227     Document Type: Conference Paper

References (14)

1. Carrier, B. 2005. File System Forensic Analysis. Addison-Wesley Professional.
2. Carvey, H. 2004. Windows Forensics and Incident Recovery. Addison-Wesley Professional.
3. Carvey, H. 2007. Windows Forensic Analysis. Syngress Publishing.
4. Hilley, S. 2007. Anti-forensics with a small army of exploits. Digital Investigation. 4, 1 (2007), 13-15. (Pubitemid 46357495)
5. Foster, J and Liu, V. 2005. Catch me if you can. In Blackhat Briefings 2005 (Las Vegas, NV, August 2005).
6. Chow, K. P., Law, F. Y., Kwan, M. Y., and Lai, P. K. 2007. The Rules of Time on NTFS File System. In Proceedings of the Second international Workshop on Systematic Approaches To Digital Forensic Engineering (April 10-12, 2007). SADFE. IEEE Computer Society, Washington, DC, 71-85. DOI= http://dx.doi.org/10. 1109/SADFE.2007.22.
7. Boyd, C. and Forster, P. 2004. Time and date issues in forensic computing-a case study. Digital Investigation. 1, 1 (2004), 18-23.
8. Buchholz, F and Spafford, E. 2004. On the role of file system metadata in digital forensics. Digital Investigation. 1, 4 (2004).
9. Buchholz, F and Falk, C. 2005. Design and implementation of zeitline: a forensic timeline editor. In Digital Forensics Research Conference, New Orleans, LA, 2005.
10. Carrier, B. The Sleuth Kit. http://www.sleuthkit.org.
11. AccessData Corp. Forensic Toolkit. http://www.accessdata.com/ forensictoolkit.html.
12. Carvey, H. 2005. The Windows registry as a forensic resource. Digital Investigation. 2 (2005), 201-205. (Pubitemid 41261446)
13. Russinovich, M. E. and Solomon, D. A. 2004. Microsoft Windows Internals, Fourth edition. Microsoft Press.
14. Carvey, H. The Regripper. http://regripper.net/.