The Prevalence of Encoded Digital Trace Evidence in the Nonfile Space of Computer Media
Garfinkel, Simson L.
MetadataShow full item record
Forensically significant digital trace evidence that is frequently present in sectors of digital media not associated with allocated or deleted files. Modern digital forensic tools generally do not decompress such data unless a specific file with a recognized file type is first identified, potentially resulting in missed evidence. Email addresses are encoded differently for different file formats. As a result, trace evidence can be categorized as Plain in File (PF), Encoded in the File (EF), Plain Not in File (PNF), or Encoded Not in File (ENF). The tool bulk_extractor finds all of these formats, but other forensic tools do not. A study of 961 storage devices purchased on the secondary market and shows that 474 contained encoded email addresses that were not in files (ENF). Different encoding formats are the result of different application programs that processed different kinds of digital trace evidence. Specific encoding formats explored include BASE64, GZIP, PDF, HIBER, and ZIP.
The article of record as published may be located at http://dx.doi.org/10.1111/1556-4029.1252810.1111/1556-4029.12528
Showing items related by title, author, creator and subject.
Hildebrand, Paula E. (Monterey, California. Naval Postgraduate School, 2001-03);We have examined the impacts of El Nino (EN) and La Nina (LN) events on North Atlantic tropical cyclones (TCs), and the physical mechanisms that produce these impacts. We constructed composites of best- track data from the ...
Brothers, Daniel G. (Monterey, California. Naval Postgraduate School, 1994-03);The nature of weld metal inclusions in relation to the formation of acicular ferrite was investigated. Gas-metal arc welds (GMAW) on High Strength Low Alloy (HSLA) plate with varying amounts of oxygen and/or carbon dioxide ...
McPherson, Deanne B. (Monterey, California. Naval Postgraduate School, 2009-09);Networks are prevalent in man-made and natural systems throughout the world. Despite recent efforts to characterize and catalog networks of all kinds, considerably less is known about the forces that drive network formation. ...