15 search results - page 2 / 3 » The Use of File Timestamps in Digital Forensics |
IMF
2007
13 years 6 months ago
2007
: Forensic hash tools are usually used to prove and protect the integrity of digital evidence: When a file is intercepted by law enforcement, a cryprographic fingerprint is taken...
JCDL
2011
ACM
12 years 8 months ago
2011
ACM
Disk images (bitstreams extracted from physical media) can play an essential role in the acquisition and management of digital collections by serving as containers that support da...
HICSS
2007
IEEE
13 years 11 months ago
2007
IEEE
The ability to detect fragments of deleted image files and to reconstruct these image files from all available fragments on disk is an important activity in the field of digital f...
IEEEARES
2008
IEEE
13 years 11 months ago
2008
IEEE
— Finding evidence of antedating is an important goal in many digital investigations. This paper explores how causality can expose antedating by investigating storage systems for...
IFIP
2005
Springer
13 years 11 months ago
2005
Springer
Digital forensic investigators are often faced with the task of manually examining a large number of (photographic) images in order to identify potential evidence. The task can be...