4 papers
SoK: Understanding Anti-Forensics Concepts and Research Practices Across Forensic Subdomains
Janine Schneider, Florian Ramming, Maximilian Eichhorn +9
Anti-forensics includes a growing set of techniques designed to obstruct forensic analysis. While cybercriminals increasingly rely on these methods, they also help researchers iden…
SoK: Timeline based event reconstruction for digital forensics: Terminology, methodology, and current challenges
Frank Breitinger, Hudan Studiawan, Chris Hargreaves
Event reconstruction is a technique that examiners can use to attempt to infer past activities by analyzing digital artifacts. Despite its significance, the field suffers from frag…
Strategies and Challenges of Timestamp Tampering for Improved Digital Forensic Event Reconstruction (extended version)
Céline Vanini, Jan Gruber, Christopher Hargreaves +3
Timestamps play a pivotal role in digital forensic event reconstruction, but due to their non-essential nature, tampering or manipulation of timestamps is possible by users in mult…
Evaluating tamper resistance of digital forensic artifacts during event reconstruction
Céline Vanini, Chris Hargreaves, Frank Breitinger
Event reconstruction is a fundamental part of the digital forensic process, helping to answer key questions like who, what, when, and how. A common way of accomplishing that is to…