Main Page

From ForensicsWiki
Revision as of 23:50, 19 February 2012 by Simsong (Talk | contribs)

Jump to: navigation, search

This is the Forensics Wiki, a Creative Commons-licensed wiki devoted to information about digital forensics (also known as computer forensics). We currently list a total of 724 pages.

Much of computer forensics is focused on the tools and techniques used by investigators, but there are also a number of important papers, people, and organizations involved. Many of those organizations sponsor conferences throughout the year and around the world. You may also wish to examine the popular journals and some special reports.


WIKI NEWS

2012-feb-19: The forensicswiki.org has been changed from Apache to nginx with the hope that this will address some of the downtime we have been having. Please email Simson if you see any weird problems. Thanks!

Featured Forensic Research

JAN 2012

Vrizlynn L.L. Thing, Tong-Wei Chua, Ming-Lee Cheong - Design of a Digital Forensics Evidence Reconstruction System for Complex and Obscure Fragmented File Carving
Computational Intelligence and Security, International Conference on 0:793-797, Los Alamitos, CA, USA,2011
Bibtex
Author : Vrizlynn L.L. Thing, Tong-Wei Chua, Ming-Lee Cheong
Title : Design of a Digital Forensics Evidence Reconstruction System for Complex and Obscure Fragmented File Carving
In : Computational Intelligence and Security, International Conference on -
Address : Los Alamitos, CA, USA
Date : 2011

Fragmented file carving is an important technique in Digital Forensics to recover files from their fragments in the absence of the file system allocation information. In this paper, we proposed a system design for solving the fragmented file carving problem taking into consideration, conditions of real-life fragmentation scenarios. We developed our evidence reconstruction and recovery system, and carried out experiments, to evaluate the capability in detecting and recovering obscured evidence. The results showed that our system is able to achieve a higher efficiency and accuracy (e.g. 1.5 minutes for the reconstruction of each highly fragmented and deleted (obscured) image in its entirety or 100% recovery), when compared with the commercial recovery system, Adroit Photo Forensics (e.g. 2.8 minutes and 6.3 minutes for a partial image recovery or failure in recovery, respectively). (See also Past Selected Articles)

Featured Article

Forensic Linux Live CD issues
Forensic Linux Live CD distributions are widely used during computer forensic investigations. Currently, many vendors of such Live CD distributions state that their Linux do not modify the contents of hard drives or employ "write protection." Testing indicates that this may not always be the case. Read More...


Topics



You can help! We have a list of articles that need to be expanded. If you know anything about any of these topics, please feel free to chip in.