The research work presented in this paper aims to review evidence extraction and analysis techniques in disk forensics. With the rise of digital storage technology, data breaches, unauthorized access, and even data manipulation continue to surge. Disk forensics helps in analyzing and extracting digital evidence to support investigation processes and prevent similar incidents in the future. This paper systematically reviews the current methodologies of evidence extraction and analysis, showing effectiveness, challenges, and their applications in forensic practice. Contrary to earlier research, which isolated certain aspects of disk forensics, this paper is about domain-specific challenges and possible breakthroughs. This study also includes a structured forensic investigation framework with some discussion of cognitive and technical factors influencing evidence extraction and analysis processes. Additionally, a comparison of the major disk forensic tools is carried out in terms of performance, reliability, and usability in fulfilling the needs of different forensics. The understanding from this paper will enable researchers and practitioners to select optimal techniques and tools to conduct an effective forensic investigation.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A Systematic Review of Evidence Extraction and Analysis in Digital Disk Forensics

  • Vrinda Abrol,
  • Simmi Kumari,
  • Ankita Ghosh,
  • Vrinda Diwakar,
  • Vivekanand Jha,
  • Deepika Suhag

摘要

The research work presented in this paper aims to review evidence extraction and analysis techniques in disk forensics. With the rise of digital storage technology, data breaches, unauthorized access, and even data manipulation continue to surge. Disk forensics helps in analyzing and extracting digital evidence to support investigation processes and prevent similar incidents in the future. This paper systematically reviews the current methodologies of evidence extraction and analysis, showing effectiveness, challenges, and their applications in forensic practice. Contrary to earlier research, which isolated certain aspects of disk forensics, this paper is about domain-specific challenges and possible breakthroughs. This study also includes a structured forensic investigation framework with some discussion of cognitive and technical factors influencing evidence extraction and analysis processes. Additionally, a comparison of the major disk forensic tools is carried out in terms of performance, reliability, and usability in fulfilling the needs of different forensics. The understanding from this paper will enable researchers and practitioners to select optimal techniques and tools to conduct an effective forensic investigation.