Distinct Sector Hashes for Target File Detection
Loading...
Authors
Young, Joel
Foster, Kristina
Garfinkel, Simson
Fairbanks, Kevin
Subjects
Advisors
Date of Issue
2012-12
Date
December 2012
Publisher
Language
Abstract
Using an alternative approach to traditional
file hashing, digital forensic investigators
can hash individually sampled subject
drives on sector boundaries and then
check these hashes against a prebuilt database,
making it possible to process raw
media without reference to the underlying
file system.
Type
Article
Description
Series/Report No
Department
Computer Science (CS)
Organization
Identifiers
NPS Report Number
Sponsors
Funder
Format
Citation
IEEE Computer, December 2012
Distribution Statement
Rights
This publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.