4 papers
Defining Atomicity (and Integrity) for Snapshots of Storage in Forensic Computing
Jenny Ottmann, Frank Breitinger, Felix Freiling
The acquisition of data from main memory or from hard disk storage is usually one of the first steps in a forensic investigation. We revisit the discussion on quality criteria for…
Strategies and Challenges of Timestamp Tampering for Improved Digital Forensic Event Reconstruction (extended version)
Céline Vanini, Jan Gruber, Christopher Hargreaves +3
Timestamps play a pivotal role in digital forensic event reconstruction, but due to their non-essential nature, tampering or manipulation of timestamps is possible by users in mult…
Nyon Unchained: Forensic Analysis of Bosch's eBike Board Computers
Marcel Stachak, Julian Geus, Gaston Pugliese +1
Modern eBike on-board computers are basically small PCs that not only offer motor control, navigation, and performance monitoring, but also store lots of sensitive user data. The B…
Systematic Evaluation of Forensic Data Acquisition using Smartphone Local Backup
Julian Geus, Jenny Ottmann, Felix Freiling
Due to the increasing security standards of modern smartphones, forensic data acquisition from such devices is a growing challenge. One rather generic way to access data on smartph…