Real-time digital forensics and triage

Digital Investigation

Volumn 10, Issue 2, 2013, Pages 158-167

  Roussev, Vassil ^a   Quates, Candice ^a   Martell, Robert ^a  

^a The Research Institute for Children   (United States)

Author keywords

Digital forensics; Latency optimized target acquisition; LOTA; Real time forensics; Triage

Indexed keywords

ELECTRONIC CRIME COUNTERMEASURES; TRACKING (POSITION);

CURRENT GENERATION; LOTA; PERFORMANCE REQUIREMENTS; REAL TIME; REAL-TIME COMPUTATIONS; TARGET ACQUISITION; TECHNICAL REQUIREMENT; TRIAGE;

DIGITAL FORENSICS;

EID: 84883559090     PISSN: 17422876     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.diin.2013.02.001     Document Type: Article

References (20)

1. Y. Gao, G. Richard, and V. Roussev "Bluepipe: a scalable architecture for on-the-spot digital forensics." International Journal of Digital Evidence 3 1 Summer 2004
2. Garfinkel S, Farrell P, Roussev V, Dinolt G. Bringing science to digital forensics with standardized forensic corpora. In: Proceedings of the digital forensic research conference (DFRWS); 2009. p. S2-11.
3. Garfinkel S, Roussev V, Nelson A, White D. Using purpose-built functions and block hashes to enable small block and sub-file forensics. In: Proceedings of the tenth annual DFRWS conference, Aug 2010, Portland, OR. p. S13-23.
4. W. Gibbons Legend of the boiling frog is just a legend, but does have environmental value Dec 12 2002 Athens Banner-Herald http://onlineathens.com/ stories/121202/hga-20021212022.shtml
5. C. Harrell Overall DF investigation process http://journeyintoir. blogspot.com/2010/10/overall-df-investigation-process.html Oct 2010
6. P. Harvey ExifTool http://owl.phy.queensu.ca/∼phil/exiftool/
7. Hibshi H, Vidas T, Cranor L. Usability of forensics tools: a user study. In: Sixth international conference on it security incident management and it forensics; 2011.
8. K. Kent, S. Chevalier, T. Grance, and H. Dang Guide to integrating forensic techniques into incident response Aug 2006 National Institute of Standards and Technology http://csrc.nist.gov/publications/nistpubs/800-86/ SP800-86.pdf
9. King C, Vidas T. Empirical analysis of solid state disk data retention when used with contemporary operating systems. In: Proceedings of the eleventh annual DFRWS conference, Aug 2011, New Orleans, LA. p. S111-7.
10. Kornblum J. Identifying almost identical files using context triggered piecewise hashing. In: Proceedings of the 6th annual DFRWS, Aug 2006, Lafayette, IN.
11. L. Marziale, and A. Case Registry Decoder http://code.google.com/p/ registrydecoder/
12. J. Metz libewf http://code.google.com/p/libewf/
13. H. Parsonage Computer forensics case assessment and triage http://computerforensics.parsonage.co.uk/triage/ ComputerForensicsCaseAssessmentAndTriageDiscussionPaper.pdf
14. D. Patterson Latency lags bandwidth Communications of the ACM 47 10 2004
15. Roussev V. An evaluation of forensics similarity hashes. In: Proceedings of the eleventh annual DFRWS conference, Aug 2011, New Orleans, LA. p. S34-41.
16. V. Roussev Data fingerprinting with similarity digests K. Chow, S. Shenoi, Research advances in digital forensics VI 2010 Springer 978-3-642-15505-5 207 226
17. Roussev V, Quates C. Content triage with similarity digests: the M57 case study. In: Proceedings of the eleventh annual DFRWS conference, Aug 2012, Washington, DC. p. S60-8.
18. RCFL. RCFL annual reports FY2003-FY2011. http://www.rcfl.gov/DSP-N- annualReport.cfm.
19. WD Black desktop hard drives, drive specification sheet. http://www.wdc.com/wdproducts/library/SpecSheet/ENG/2879-771434.pdf.
20. WD Green desktop hard drives, drive specification sheet. http://www.wdc.com/wdproducts/library/SpecSheet/ENG/2879-771438.pdf.