Digital Stratigraphy: Contextual Analysis of File System Traces in Forensic Science

Details

Ressource 1Download: Casey-2018-Journal_of_Forensic_Sciences.pdf (1299.34 [Ko])
State: Public
Version: Final published version
Serval ID
serval:BIB_147B393E4A6B
Type
Article: article from journal or magazin.
Collection
Publications
Institution
Title
Digital Stratigraphy: Contextual Analysis of File System Traces in Forensic Science
Journal
Journal of Forensic Sciences
Author(s)
Casey Eoghan
ISSN
0022-1198
Publication state
Published
Issued date
09/2018
Peer-reviewed
Oui
Volume
63
Number
5
Pages
1383-1391
Language
english
Abstract
This work introduces novel methods for conducting forensic analysis of file allocation traces, collectively called digital stratigraphy. These in-depth forensic analysis methods can provide insight into the origin, composition, distribution, and time frame of strata within storage media. Using case examples and empirical studies, this paper illuminates the successes, challenges, and limitations of digital stratigraphy. This study also shows how understanding file allocation methods can provide insight into concealment activities and how real-world computer usage can complicate digital stratigraphy. Furthermore, this work explains how forensic analysts have misinterpreted traces of normal file system behavior as indications of concealment activities. This work raises awareness of the value of taking the overall context into account when analyzing file system traces. This work calls for further research in this area and for forensic tools to provide necessary information for such contextual analysis, such as highlighting mass deletion, mass copying, and potential backdating.
Keywords
Pathology and Forensic Medicine, Genetics
Pubmed
Web of science
Create date
15/01/2019 21:28
Last modification date
21/08/2019 7:08
Usage data