A framework for digital investigations: a case study using BPB modifications
Conference paper
Mitchell, I. 2011. A framework for digital investigations: a case study using BPB modifications. 6th International Annual Workshop on Digital Forensics and Incident Analysis (WDFIA 2011). Kingston University, London Jul 2011
Type | Conference paper |
---|---|
Title | A framework for digital investigations: a case study using BPB modifications |
Authors | Mitchell, I. |
Abstract | A framework is developed and the following proposals are made: i) Notation for Framework; ii) a Framework for Digital Investigations Experiments (FDIE); iii) Case study modifying BPB and demonstrating the Framework; and iv) extending the Framework to Digital Investigations (FDI). A case study using BIOS Partition Block (BPB) modifications to render the partitions unreadable is used to demonstrate the framework. The Framework is applied and is a success. From this experiment the Framework (FDIE) is extended to Digital Investigations (FDI). |
Keywords | Framework; recovery; anti-contamination; evidential integrity; BPB; FAT; NTFS |
Research Group | Artificial Intelligence group |
Conference | 6th International Annual Workshop on Digital Forensics and Incident Analysis (WDFIA 2011) |
Publication process dates | |
Deposited | 09 Aug 2013 |
Output status | Published |
Web address (URL) | http://www.wikicfp.com/cfp/servlet/event.showcfp?eventid=12559©ownerid=18211 |
Language | English |
Permalink -
https://repository.mdx.ac.uk/item/842q4
38
total views0
total downloads4
views this month0
downloads this month