ipl-logo

Digital Forensic Analysis

930 Words4 Pages

helping to anticipate the unauthorized actions shown to be disruptive to planned operations”. This definition is generally accepted to be an all-inclusive definition. [6]
Willassen and Mjølsnes (2005) defined digital forensics as
“the practice of scientifically derived and proven technical methods and tools towards the after-the-fact digital information derived from digital sources for the purpose of facilitating or furthering the reconstruction of events as forensic evidence”. [6]
The main difference between these two definitions is that
Willassen and Mjølsnes (2005) removed the criminal element, which broadens the scope of application to include digital forensics in various types of investigations, such as commercial investigations. [6] …show more content…

It is for this reason that a digital forensic process must be flexible to accommodate various technologies. A static process will limit future developments in the digital forensics field. Robbins (2012) defines computer forensics as “simply the application of computer investigation and analysis techniques in the interests of determining potential legal evidence” and does not prescribe the process as methodically as Palmer, but nevertheless includes a number of fixed steps in his explanation. However, formulating a fixed process list in a definition of digital forensics should be avoided. [6]
A digital investigation may encounter many formats of digital data and therefore there exist several types of analysis. The different analysis types are based on interpretation, or abstraction, layers, which are generally part of the data’s design. For example, consider the data on a hard disk, which has been designed with several interpretation layers. The lowest layer may contain 3 partitions or other containers that are used for volume management. Inside of each partition is data that has been organized into a file system or database. The data in a file system is interpreted to create files that contain data in an application-specific format. Each of these layers has its own analysis techniques and requirements. Examples of common digital analysis …show more content…

While the interesting part of Android forensics involves the acquisition and analysis of data from devices. [8]
III. ANDROID APPLICATION
A. Android Smartphone
The Android mobile platform has quickly risen from its first phone in October 2008 to the most popular mobile operating system in the world by early 2011. The explosive growth of the platform has been a significant win for consumers with respect to competition and features. [8]
B. Line
The Android mobile platform has quickly risen from its first phone in October 2008 to the most popular mobile operating system in the world by early 2011. The explosive growth of the platform has been a significant win for consumers with respect to competition and features.
Originally created for Android and iOS phones, it’s extension is now available to windows phone and desktops also. BlackBerry version was made available in October 2012. Currently 150 million users are using this app which allows texting, exchange of pictures, audio messages and even crystal clear voice calls over internet all for free in over 230 countries. Compared to other apps, Line has better outreach when it

Show More
Related

  • Nt1310 Unit 2 Term Paper

    458 Words  | 2 Pages

    This would require that a detailed description be given of the data that is the content of the computer which may have been removed from the computer and stored

    Read More

  • Nt1310 Lab 7.5

    1619 Words  | 7 Pages

    4.7.5 Data Preservation and Isolation from the Network. The main purpose of a digital forensic report is to keep the data integrity, avoiding any type of data alteration, in order to present valid evidences, for instance in a court. The use of not valid software to check the stored information in a mobile phone can alter these information. The action of receive new data can alter the information stored, for instance an automatic firmware update, or remote device control with the risks involved. Therefore, it is extremelly important have the device completely isolated from the network.

    Read More

  • Assignment: Is 4670 Cybercrime Forensics

    429 Words  | 2 Pages

    Lowry Williams IS 4670 Cybercrime Forensics Unit 5 Assignment 1 Create data recovery plan Data the count may order or give you authorize to seizure a computer so that you may be able to extracted things from the computer’s hard drives. You need to do it in many difference phases you want to insure that the integrity of the computer evidence. You should copies all the files onto a write once only CD- read only memory disks. You may want to “ clone” your computer hard drive, you would do this, because you would not want to mess up the hard drive that was on your computer. This also means that you would be copying everything this will including the operating software.

    Read More

  • Assante Case: Cheating V. 555 US

    620 Words  | 3 Pages

    During the comprehensive forensic examination Assante’s personal laptop was subjected to an eighteen hour intrusive search using specialized equipment to open and read all files on the laptop, scanning the unallocated space on the hard drive for deleted files, then proceeding to

    Read More

  • Murder Of Gaven Brooks Essay

    444 Words  | 2 Pages

    Every day forensic investigators use tactics just like the ones that were discussed throughout the paper. It’s more than just looking for an admission of guilt, and interrogating potential suspects until they

    Read More

  • Court Case Of Harold James Blackburn

    1230 Words  | 5 Pages

    In 1989, former NSW police superintendent Harold James Blackburn was arrested and charged with 25 crimes under the Crimes Act 1900 which took place over a matter of nearly 20 years (New South Wales 1990). The charges included the crime of rape at Georges Hall in 1969 and sexual assault at Sutherland in 1985, as the Crimes Act 1900 had been updated during the periods of time that the alleged crimes took place (New South Wales 1990). When the case was presented to court in 1989, the Director of Public Prosecutions offered no evidence and the magistrate discharged Mr Blackburn on all charges (New South Wales 1990). A royal commission was established in 1990 to investigate the events and determine how an investigation could have failed to the

    Read More

  • Texas Servant Girl Murders (HDSI)

    1333 Words  | 6 Pages

    Comparing simple techniques simply to retrieve a piece of evidence is completely different as we learn more about the science and learn from the mistakes made in the past. Looking back at the 1800’s and comparing the technology of the 21st century, the difference is certainly huge. The increase in technology makes information more vast and more ideas can be shared easily. Many sciences are based off many “what ifs” while forensic science is more factual and attempt to solve puzzling occurrences and events and get down to what truly

    Read More

  • Forensic Evidence That Led To The Murder Of Scott Peterson

    1085 Words  | 5 Pages

    Compelling Evidence In today’s society, high-tech gadgets and the media have given the impression the essential necessity for forensic evidence in order to convict. Once in a while, cases like the Laci Peterson murder come along with little forensic evidence but a whole lot of circumstantial evidence and motive. In the following paragraphs, I will discuss the forensic evidence discovered that led to the conviction and death sentencing of Laci’s husband, Scott Peterson.

    Read More

  • Forensic Science Case Study

    665 Words  | 3 Pages

    Science has come a long way over the years. It has helped countless every day struggles and cure diseases most commonly found. What you don’t hear about however is the advancement of forensic science. Forensic science has helped solve countless cases of murder, rape, and sexual assault. In the case of John Joubert, it helped solve the murders of three young boys with one small piece of evidence that linked him directly to the crime.

    Read More

  • Hrm/531 Week 4 Individual Assignment

    673 Words  | 3 Pages

    The process of analyzing, retaining, and storing data that can be crucial during a civil or criminal case against an employee or a business; is referred to as eDiscovery

    Read More

  • Fourth Amendment Closets

    846 Words  | 4 Pages

    With the introduction of new technology in recent years, the government can discreetly capture evidence from electronic files,

    Read More

  • Nt1310 Unit 1 Chapter 3

    593 Words  | 3 Pages

    1. [100 pts] Refer to the Chapter 3 of DHS IT Security Essential Body of Knowledge Main Text (See DHS EBK_MainText_nps36-010708-07.pdf in Resources folder). Pick ONE competency area from EBK (data security, digital forensics, risk management, etc.) and provide the definition of each key term listed under that competency area. You can use the definitions provided in the textbook or search them from other sources. I have chosen the digital forensics competency area and the definition of each key terms as listed in the textbook are as follows:

    Read More

  • Pamela Foddrill Tragic Abduction Case Study

    2482 Words  | 10 Pages

    The former being defined as the evidence collected in order to convict or rule out suspects, and the latter being defined as the way the investigators developed the investigation and how it evolved throughout the ensuing years. In order to evaluate these two different subjects, one needs to examine the similarities and differences between this investigation and theories about how investigation of this type develop, the nuances of this investigation not able to be explained by theory, investigatory elements that

    Read More

  • The Craigslist Killer: A Case Study

    544 Words  | 3 Pages

    Computer forensics processes must adhere to standards set by the courtroom that often complicates what could have been a simple data analysis. In court, knowing who connected to the system based on logs is not enough. There must be facts that will support those connection

    Read More

  • Advantages And Disadvantages Of Digital Forensics

    1915 Words  | 8 Pages

    The following section will consider advantages and limitation of the first two mentioned types of digital forensics: Traditional (dead) and Live computer forensics. TRADITIONAL (DEAD) VS LIVE DIGITAL FORENSICS Traditional (Dead) Forensics In order forensic acquisition to be more reliable it must be performed on computers that have been powered off. This type of forensics is known as ‘traditional’ or 'dead ' forensic acquisition. The whole process of dead acquisition, including search and seizure flowchart and acquisition of digital evidence flowchart is shown on Figure 2 and Figure 3 respectively.

    Read More

More about Digital Forensic Analysis

Open Document