A Digital Media Similarity Measure for Triage of Digital Forensic Evidence

2020 ◽  
pp. 111-135
Author(s):  
Myeong Lim ◽  
James Jones
Keyword(s):  
Digital Media ◽  
Similarity Measure ◽  
Forensic Evidence ◽  
Digital Forensic

Forensic Data Extraction and Analysis of Left Artifacts on emulated Android Phones: A Case Study of Instant Messaging Applications

2017 ◽  
Vol 2 (11) ◽  
pp. 8-16
Author(s):  
Moses Ashawa ◽  
Innocent Ogwuche
Keyword(s):  
Mobile Phones ◽  
Instant Messaging ◽  
Data Extraction ◽  
Digital Evidence ◽  
Cyber Attack ◽  
Forensic Evidence ◽  
Digital Forensic ◽  
Proportional Increase ◽  
Forensic Tools

The fast-growing nature of instant messaging applications usage on Android mobile devices brought about a proportional increase on the number of cyber-attack vectors that could be perpetrated on them. Android mobile phones store significant amount of information in the various memory partitions when Instant Messaging (IM) applications (WhatsApp, Skype, and Facebook) are executed on them. As a result of the enormous crimes committed using instant messaging applications, and the amount of electronic based traces of evidence that can be retrieved from the suspect’s device where an investigation could convict or refute a person in the court of law and as such, mobile phones have become a vulnerable ground for digital evidence mining. This paper aims at using forensic tools to extract and analyse left artefacts digital evidence from IM applications on Android phones using android studio as the virtual machine. Digital forensic investigation methodology by Bill Nelson was applied during this research. Some of the key results obtained showed how digital forensic evidence such as call logs, contacts numbers, sent/retrieved messages, and images can be mined from simulated android phones when running these applications. These artefacts can be used in the court of law as evidence during cybercrime investigation.

Forensic Analysis of Telegram Desktop-based Applications using the National Institute of Justice (NIJ) Method

2020 ◽  
Vol 8 (4) ◽  
pp. 381
Author(s):  
I Gusti Ngurah Guna Wicaksana ◽  
I Ketut Gede Suhartana
Keyword(s):  
Instant Messaging ◽  
Personal Information ◽  
Forensic Analysis ◽  
Criminal Cases ◽  
Forensic Evidence ◽  
Digital Forensic ◽  
National Institute Of Justice ◽  
Evidence Analysis ◽  
The Media ◽  
Log File

Abstract The development of telecommunications has increased very rapidly since the internet-based instant messaging service has spread rapidly to Indonesia. Telegram application is one of the growing and well-known application services in Indonesia, Desktop or smartphone-based Telegram applications, it is very possible to use digital crimes by using services, user personal information, or by hacking the Telegram application. This study explains the stages of investigation of cybercrime cases that occurred in desktop-based telegram. The method used for this research refers to the stage of investigation that was carried out in previous studies, namely using the National Institute of Justice (NIJ) method with the stages of the preparation stage, the collection stage, the examination stage, the analysis stage, and the reporting stage. The media used in this study is a desktop-based Telegram application that is synchronized with an Android-based Telegram. In this process, the location of the log file, cache, and digital proof image file was obtained in the conversation of a desktop-based Telegram application. Digital forensic evidence obtained is expected to strengthen evidence of criminal cases in court in the form of digital evidence analysis results. Keywords: Telecommunications, Digital Forensic, Telegram, Investigation, Cybercrime

Challenges to Digital Forensic Evidence in the Cloud

2013 ◽  
pp. 59-78 ◽  
Author(s):  
Fred Cohen
Keyword(s):  
Cloud Computing ◽  
Forensic Evidence ◽  
Digital Forensic ◽  
Computing Environments

Digital forensic evidence is subject to a variety of challenges, and these challenges apply in the Cloud as anywhere else. This chapter is an overview of these issues specifically oriented toward the Cloud Computing environments of today.

A study on block-based recovery of damaged digital forensic evidence image

2011 ◽  
Vol 57 (2) ◽  
pp. 407-422 ◽  
Author(s):  
Eun-Gyeom Jang ◽  
Byong-Soo Koh ◽  
Yong-Rak Choi
Keyword(s):  
Forensic Evidence ◽  
Digital Forensic ◽  
Block Based

scholarly journals The Forensic Curator: Digital Forensics as a Solution to Addressing the Curatorial Challenges Posed by Personal Digital Archives

2012 ◽  
Vol 7 (2) ◽  
pp. 40-63
Author(s):  
Gareth Knight
Keyword(s):  
Law Enforcement ◽  
Digital Media ◽  
Personal Data ◽  
Digital Archives ◽  
Computing Technology ◽  
Digital Forensic ◽  
Timeline Analysis ◽  
Digital Material ◽  
Data Collections ◽  
Data Carving

The growth of computing technology during the previous three decades has resulted in a large amount of content being created in digital form. As their creators retire or pass away, an increasing number of personal data collections, in the form of digital media and complete computer systems, are being offered to the academic institutional archive. For the digital curator or archivist, the handling and processing of such digital material represents a considerable challenge, requiring development of new processes and procedures. This paper outlines how digital forensic methods, developed by the law enforcement and legal community, may be applied by academic digital archives. It goes on to describe the strategic and practical decisions that should be made to introduce forensic methods within an existing curatorial infrastructure and how different techniques, such as forensic hashing, timeline analysis and data carving, may be used to collect information of a greater breadth and scope than may be gathered through manual activities.

Sign in / Sign up

Export Citation Format

Share Document