Results 11 to 20 of about 1,365 (225)
File carving is the process of recovering files from an investigative target, potentially without knowledge of the filesystem structure. Current generation file carvers make complete copies of recovered files. Unfortunately, they often produce a large number of false positives — “junk” files with invalid formats that frequently consume large amounts of
Vassil Roussev
exaly +2 more sources
Advanced file carving: ontology, models and methods
File carving techniques are important in the field of digital forensics. At the same time, the rapid growth in the amount and types of data requires the development of file carving methods in terms of capabilities, accuracy, and computational efficiency.
Maksym Boiko +2 more
openaire +3 more sources
Performance Analysis of File Carving Tools [PDF]
File carving is the process of recovering files based on the contents of a file in scenarios where file system metadata is unavailable. In this research a total of 6 file carving tools were tested and reviewed to evaluate the performance quality of each.
exaly +3 more sources
Data restoration and file carving
This document proposes to make a contribution to the conceptualization and implementation of data recovery techniques through the abstraction of recovery methodologies and aspects that influence the process, relating human motivation to research needs, whether these are for the Auditing or computer science, allowing to generate classification of ...
Javier Diaz
exaly +3 more sources
Creating a Map of User Data in NTFS to Improve File Carving
Digital forensics and, especially, file carving are burdened by the large amounts of data that need to be processed. Attempts to solve this problem include efficient carving algorithms, parallel processing in the cloud and data reduction by filtering uninteresting files.
Stefan Axelsson
exaly +4 more sources
RX_myKarve carving framework for reassembling complex fragmentations of JPEG images
Digital forensic aims to provide an assistance for making decisions about a crime by looking at a file content which usually involves image files such as GIF, BMP, JPEG and etc. JPEG is a very popular image file format.
Rabei Raad Ali, Kamaruddin Malik Mohamad
doaj +1 more source
Syntactical method for reconstructing highly fragmented OOXML files
A common task in computer forensics is to recover files that lack file system metadata. In the case of searching for file fragments in unallocated space, file carving is the most often used method, which is ideal for unfragmented data.
Maksym Boiko, Viacheslav Moskalenko
doaj +1 more source
File fragment type identification is an important step in file carving and data recovery. Machine learning techniques, especially neural networks, have been utilized for this problem, some with very promising results.
Kristian Skracic +2 more
doaj +1 more source
Memory fragment file carving algorithm based on the reverse of the structure chain
To address the extraction of document evidence for doc, pdf, and other common file types in the memory image, the model of fragment file carving based on memory image was proposed.Then, on the basis of the model, the fragment file carving algorithm based
Binglong LI +4 more
doaj +2 more sources
Forensic Recovery of File System Metadata for Digital Forensic Investigation
File system forensics is one of the most important elements in digital forensic investigations. To date, various file system forensic methods, such as analysis of tree structure and the recovery of deleted file data, have been studied.
Junghoon Oh, Sangjin Lee, Hyunuk Hwang
doaj +1 more source

