Using open source for forensic purposes

  • Authors:
  • Manuel Delgado;Manuela Aparicio;Carlos Costa

  • Affiliations:
  • ISCTE-IUL, Lisboa;Adetti-IUL/ISCTE-IUL, Lisboa;Adetti-IUL/ISCTE-IUL, Lisboa

  • Venue:
  • Proceedings of the Workshop on Open Source and Design of Communication
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

This article provides an overview of the basic digital forensic process. In different contexts of crime, the use of "computer forensics" is a usual way to gather evidence. Digital data is collected and analyzed in order to be presented in court as evidence of illegal activities. This is already a first-line option in most cases for criminal investigation. For some types of crime, particularly economic and financial research focuses on the storage devices. In the context of a crime, create and certify a full Image of suspect devices is vital to preserve its integrity. The disk image, take sector by sector copy usually for forensic purposes, and as such will contain some mechanism (internal verification) to prove that the copy is accurate and has not changed. In this work we present some Open Source tools to perform an effective role in computer forensics, which ensure the realization of these images, fulfilling all the requirements, so that any evidence recovered from his analysis, may be admitted in court.