Digital Stratigraphy: Contextual Analysis of File System Traces in Forensic Science
Détails
Télécharger: Casey-2018-Journal_of_Forensic_Sciences.pdf (1299.34 [Ko])
Etat: Public
Version: Final published version
Etat: Public
Version: Final published version
ID Serval
serval:BIB_147B393E4A6B
Type
Article: article d'un périodique ou d'un magazine.
Collection
Publications
Institution
Titre
Digital Stratigraphy: Contextual Analysis of File System Traces in Forensic Science
Périodique
Journal of Forensic Sciences
ISSN
0022-1198
Statut éditorial
Publié
Date de publication
09/2018
Peer-reviewed
Oui
Volume
63
Numéro
5
Pages
1383-1391
Langue
anglais
Résumé
This work introduces novel methods for conducting forensic analysis of file allocation traces, collectively called digital stratigraphy. These in-depth forensic analysis methods can provide insight into the origin, composition, distribution, and time frame of strata within storage media. Using case examples and empirical studies, this paper illuminates the successes, challenges, and limitations of digital stratigraphy. This study also shows how understanding file allocation methods can provide insight into concealment activities and how real-world computer usage can complicate digital stratigraphy. Furthermore, this work explains how forensic analysts have misinterpreted traces of normal file system behavior as indications of concealment activities. This work raises awareness of the value of taking the overall context into account when analyzing file system traces. This work calls for further research in this area and for forensic tools to provide necessary information for such contextual analysis, such as highlighting mass deletion, mass copying, and potential backdating.
Mots-clé
Pathology and Forensic Medicine, Genetics
Pubmed
Web of science
Création de la notice
15/01/2019 20:28
Dernière modification de la notice
21/08/2019 6:08