Sciweavers

2 search results - page 1 / 1
» sadfe 2009
Sort
View
SADFE
2009
IEEE
13 years 11 months ago
File Fragment Classification-The Case for Specialized Approaches
Increasingly advances in file carving, memory analysis and network forensics requires the ability to identify the underlying type of a file given only a file fragment. Work to dat...
Vassil Roussev, Simson L. Garfinkel
SADFE
2009
IEEE
13 years 11 months ago
Automating Disk Forensic Processing with SleuthKit, XML and Python
We have developed a program called fiwalk which produces detailed XML describing all of the partitions and files on a hard drive or disk image, as well as any extractable metadat...
Simson L. Garfinkel