A Tale of Two Traces – Archives, Diplomatics, and Digital Forensics

Analyzing registry, log files, and prefetch files in finding digital evidence in graphic design applications

The products of graphic design applications leave behind traces of digital information which can be used during a digital forensic investigation in cases where counterfeit documents have been created. This paper analyzes the digital forensics involved in the creation of counterfeit documents. This is achieved by first recognizing the digital forensic artifacts left behind from the use of graphi...

Digital Records Forensics: A New Science and Academic Program for Forensic Readiness

This paper introduces the Digital Records Forensics project, a research endeavour located at the University of British Columbia in Canada and aimed at the development of a new science resulting from the integration of digital forensics with diplomatics, archival science, information science and the law of evidence, and of an interdisciplinary graduate degree program, called Digital Records Fore...

Digital Necrosis: A Hoarder’s Tale

Chapter 9 Media Forensics

Media forensics is the youngest subfield associated with information hiding and most closely related to the detection techniques discussed in previous chapters of this book. Like all forensic sciences, media forensics concerns the provision of evidence to support decisions, for example in the court of law. Over the past decade, scholars in media forensics have developed and evaluated a growing ...

Digital Meta-Forensics: Quantifying the Investigation

We review, analyse and evaluate recent developments in two related areas of digital forensics. The first involves quantifying the extent to which the recovered digital evidential traces support the prosecution‟s contention that a particular digital crime has been committed. The second addresses the issue of quantifying the cost-effectiveness of the digital forensic investigative process, in ord...