Open Access. Powered by Scholars. Published by Universities.®
- Keyword
-
- Android forensics (1)
- Android investigations (1)
- Android location data (1)
- Apple data structure (1)
- Apple forensics (1)
-
- Apple partitions (1)
- Cloud analyzer (1)
- Computer crimes -- Investigation (1)
- Digital forensics (1)
- Filexray (1)
- Forensic sciences (1)
- Google location history (1)
- Gpt scheme (1)
- Guid partition table (1)
- Hfs+ (1)
- Hfs+ format (1)
- Hfs+ journal (1)
- Hfs+ volume (1)
- Location forensics (1)
- Mac forensics (1)
- Mac partitions (1)
- Mobile device forensics (1)
- Mobile device investigations (1)
- Virtual computer systems (1)
- Winhex (1)
Articles 1 - 3 of 3
Full-Text Articles in Legal Studies
Providing Context To The Clues: Recovery And Reliability Of Location Data From Android Devices, Connie Bell
Providing Context To The Clues: Recovery And Reliability Of Location Data From Android Devices, Connie Bell
Electronic Theses and Dissertations
Mobile device data continues to increase in significance in both civil and criminal investigations. Location data is often of particular interest. To date, research has established that the devices are location aware, incorporate a variety of resources to obtain location information, and cache the information in various ways. However, a review of the existing research suggests varying degrees of reliability of any such recovered location data. In an effort to clarify the issue, this project offers case studies of multiple Android mobile devices utilized in controlled conditions with known settings and applications in documented locations. The study uses data recovered …
Hfs Plus File System Exposition And Forensics, Scott Ware
Hfs Plus File System Exposition And Forensics, Scott Ware
Electronic Theses and Dissertations
The Macintosh Hierarchical File System Plus, HFS +, or as it is commonly referred to as the Mac Operating System, OS, Extended, was introduced in 1998 with Mac OS X 8.1. HFS+ is an update to HFS, Mac OS Standard format that offers more efficient use of disk space, implements international friendly file names, future support for named forks, and facilitates booting on non-Mac OS operating systems through different partition schemes. The HFS+ file system is efficient, yet, complex. It makes use of B-trees to implement key data structures for maintaining meta-data about folders, files, and data. The implementation of …
The Implications Of Virtual Environments In Digital Forensic Investigations, Farrah M. Patterson
The Implications Of Virtual Environments In Digital Forensic Investigations, Farrah M. Patterson
Electronic Theses and Dissertations
This research paper discusses the role of virtual environments in digital forensic investigations. With virtual environments becoming more prevalent as an analysis tool in digital forensic investigations, it’s becoming more important for digital forensic investigators to understand the limitation and strengths of virtual machines. The study aims to expose limitations within commercial closed source virtual machines and open source virtual machines. The study provides a brief overview of history digital forensic investigations and virtual environments, and concludes with an experiment with four common open and closed source virtual machines; the effects of the virtual machines on the host machine as …