Distinct Sector Hashes for Target File Detection
Author
Young, Joel
Foster, Kristina
Garfinkel, Simson
Fairbanks, Kevin
Date
2012-12Metadata
Show full item recordAbstract
Using an alternative approach to traditional
file hashing, digital forensic investigators
can hash individually sampled subject
drives on sector boundaries and then
check these hashes against a prebuilt database,
making it possible to process raw
media without reference to the underlying
file system.