2018
DOI: 10.12928/telkomnika.v16i2.8230
|View full text |Cite
|
Sign up to set email alerts
|

File Reconstruction in Digital Forensic

Abstract: Abstract

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
3
1
1

Citation Types

0
5
0
1

Year Published

2020
2020
2024
2024

Publication Types

Select...
5
2
1
1

Relationship

0
9

Authors

Journals

citations
Cited by 9 publications
(6 citation statements)
references
References 12 publications
(13 reference statements)
0
5
0
1
Order By: Relevance
“…Such a timeline sometimes is called a Super Timeline. Sitompul, Handoko, & Rahmat [12] state that to have a clear view of events that occurred during a time period is challenging to achieve in digital investigation. Event reconstruction, which allows a digital investigator to understand the timeline of a crime, is one of the paramount steps of the digital investigation process [13].…”
Section: Literature Reviewmentioning
confidence: 99%
“…Such a timeline sometimes is called a Super Timeline. Sitompul, Handoko, & Rahmat [12] state that to have a clear view of events that occurred during a time period is challenging to achieve in digital investigation. Event reconstruction, which allows a digital investigator to understand the timeline of a crime, is one of the paramount steps of the digital investigation process [13].…”
Section: Literature Reviewmentioning
confidence: 99%
“…Keuntungannya, file yang dapat di-recovery lebih banyak karena area pencariannya meliputi seluruh area media penyimpanan. Namun, karena tidak melakukan analisis terhadap metada file system, maka metode carving tidak akan menemukan informasi seperti filename, timestamp, exist/deleted, fragmentasi, dsb [4], [5], [7], [15].…”
Section: Pendahuluanunclassified
“…Wollaston et al, in their paper, compared the data recovery functions of two forensic suites and three standalone non-forensic commercial applications, with the result that all tools had a comparable performance with respect to data recovery functions [11]. Sitompul et al, propose an Aho-Corasick parsing technique to read file attributes from the master file table (MFT), in order to examine the file condition, with the result that the file reconstruction process on the file system was performed successfully in 87.50% and string matching process average time was 0.32 second [12]. Bansal et al, describe the various methods and tools to recover data from Harddisk, how data recovery tools work, in what situation the data can lose permanently, and in what conditions data can be recovered [13].…”
Section: Introductionmentioning
confidence: 99%