Digital Forensics
Introduction and background information:
Digital forensics is a branch of forensic science involving the recovery and investigation of material found in digital devices used in crimes or by criminals. In the past 15 years it has expanded greatly with all the advances in technology but much of the new technology has not been studied yet. The research I am doing is important because if the study is successful in the future many forensic departments could use my research to solve crimes.
Key terms:
Jump lists- A feature that allows you to view documents in a recent program that is on your taskbar.
Windows 10- A version of Microsoft's operating system that was launched after Windows 8.
LNK file- A type of Microsoft Windows Shortcut Files with the …show more content…
Can solve cold cases.
Future focus of research in this topic:
Find ways to integrate jump lists into solving modern crimes.
Finding faster ways to parse metadata including jump lists.
Finding new ways to gain information from a criminal's devices.
Results of related research:
Larson T. - Jump lists are saved into two different sections, Automatic and Custom witch are both stored in different subdirectories.
Lyness R.- Jump List data is stored in Compound Binary files.
MSDN - All the sector types are eventually linked back to the header sector, except for the range lock sector and unallocated free sectors.
Analysis of related research:
Larson T.- Using the different sections we can analyze when each app is used and what the user was doing.
Lyness R.- The data for jump lists will all be in one large file so it is easier to access it and it will be easier to find specific variables.
MSDN- The data is all linked together so it can all be managed from one header and all the files are managed by the range lock sector which is located separate of the header so it can see the changes made to the files to see if anyone is trying to tamper with digital
Digital forensics is a branch of forensic science involving the recovery and investigation of material found in digital devices used in crimes or by criminals. In the past 15 years it has expanded greatly with all the advances in technology but much of the new technology has not been studied yet. The research I am doing is important because if the study is successful in the future many forensic departments could use my research to solve crimes.
Key terms:
Jump lists- A feature that allows you to view documents in a recent program that is on your taskbar.
Windows 10- A version of Microsoft's operating system that was launched after Windows 8.
LNK file- A type of Microsoft Windows Shortcut Files with the …show more content…
Can solve cold cases.
Future focus of research in this topic:
Find ways to integrate jump lists into solving modern crimes.
Finding faster ways to parse metadata including jump lists.
Finding new ways to gain information from a criminal's devices.
Results of related research:
Larson T. - Jump lists are saved into two different sections, Automatic and Custom witch are both stored in different subdirectories.
Lyness R.- Jump List data is stored in Compound Binary files.
MSDN - All the sector types are eventually linked back to the header sector, except for the range lock sector and unallocated free sectors.
Analysis of related research:
Larson T.- Using the different sections we can analyze when each app is used and what the user was doing.
Lyness R.- The data for jump lists will all be in one large file so it is easier to access it and it will be easier to find specific variables.
MSDN- The data is all linked together so it can all be managed from one header and all the files are managed by the range lock sector which is located separate of the header so it can see the changes made to the files to see if anyone is trying to tamper with digital