A Methodology and Tool for Investigation of Artifacts Left by the BitTorrent Client

Venčkauskas, Algimantas; Jusas, Vacius; Paulikas, Kęstutis; Toldinas, Jevgenijus

doi:10.3390/sym8060040

Cited by 3 publications

(1 citation statement)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The first stage, in which many potential sources of digital evidence for specific information are reviewed, is alternatively referred to as survey or triage. The same idea that triage is part of forensic examination, is supported in later works [4][5][6][7][8].…”

Section: Introductionmentioning

confidence: 94%

Methods and Tools of Digital Triage in Forensic Context: Survey and Future Directions

2017

Self Cite

View full text Add to dashboard Cite

Digital triage is the first investigative step of the forensic examination. The digital triage comes in two forms, live triage and post-mortem triage. The primary goal of the live triage is a rapid extraction of an intelligence from the potential sources. The live triage raises legitimate concerns. The post-mortem triage is conducted in the laboratory and its main goal is ranking of the seized devices for the possible existence of the relevant evidence. The digital triage has the potential to quickly identify items that are likely to contain the evidential data. Therefore, it is a solution to the problem of case backlogs. However, existing methods and tools of the digital triage have limitations, especially, in the forensic context. Nevertheless, we have no better solution for the time being. In this paper, we critically review published research works and the proposed solutions for digital triage. The review is divided into four sections as follows: live triage, post-mortem triage, mobile device triage, and triage tools. We conclude that many challenges are awaiting for the developers in creating methods and tools of digital triage in order to keep pace with the development of new technologies.

show abstract

Section: Introductionmentioning

confidence: 94%

Methods and Tools of Digital Triage in Forensic Context: Survey and Future Directions

2017

Self Cite

View full text Add to dashboard Cite

show abstract

The Case for Validating ADDIE Model as a Digital Forensic Model for Peer-to-Peer Network Investigation

2022

View full text Add to dashboard Cite

Rapid technological advancement can substantially impact the processes of digital forensic investigation and present a myriad of challenges to the investigator. With these challenges, it is necessary to have a standard digital forensic framework as the foundation of any digital investigation. State-of-the-art digital forensic models assume that it is safe to move from one investigation stage to the next. It guides the investigators with the required steps and procedures. This brings a great stride to validate a non-specific framework to be used in most digital investigation procedures. This paper considers a new technique for detecting active peers that participate in a peer-to-peer (P2P) network. As part of our study, we crawled the µTorrent P2P client over ten days in different instances while logging all participating peers. We then employed digital forensic techniques to analyse the popular users and generate evidence within them with high accuracy. We evaluated our approach against the standard Analysis, Design, Development, Implementation, and Evaluation (ADDIE) model for the digital investigation to achieve the credible digital evidence presented in this paper. Finally, we presented a validation case for the ADDIE model using the United States Daubert Test and the United Kingdom’s Forensic Science Regulator Guidance – 218 (FSR-G-218) and Forensic Science Regulator Guidance – 201 (FSR-G-201) to formulate it as a standard digital forensic model.

show abstract

Efficacy of ADDIE Model in Peer-to-Peer Networks: Digital Evidence Investigation

Musa

Awan

Abobaker

2021

2021 8th International Conference on Future Internet of Things and Cloud (FiCloud)

View full text Add to dashboard Cite

A Methodology and Tool for Investigation of Artifacts Left by the BitTorrent Client

Cited by 3 publications

References 15 publications

Methods and Tools of Digital Triage in Forensic Context: Survey and Future Directions

Methods and Tools of Digital Triage in Forensic Context: Survey and Future Directions

The Case for Validating ADDIE Model as a Digital Forensic Model for Peer-to-Peer Network Investigation

Efficacy of ADDIE Model in Peer-to-Peer Networks: Digital Evidence Investigation

Contact Info

Product

Resources

About