The Rules of Time on NTFS File System

Authors:
K. P. Chow;Frank Y. W. Law;Michael Y. K. Kwan;Pierre K. Y. Lai
Affiliations:
The University of Hong Kong, Hong Kong;The University of Hong Kong, Hong Kong;The University of Hong Kong, Hong Kong;The University of Hong Kong, Hong Kong
Venue:
SADFE '07 Proceedings of the Second International Workshop on Systematic Approaches to Digital Forensic Engineering
Year:
2007

Citing 0
Cited 4

Time based data forensic and cross-reference analysis

Proceedings of the 2011 ACM Symposium on Applied Computing
Analysis of changes in file time attributes with file manipulation

Digital Investigation: The International Journal of Digital Forensics & Incident Response
Detecting data theft using stochastic forensics

Digital Investigation: The International Journal of Digital Forensics & Incident Response
A multimedia analytics framework for browsing image collections in digital forensics

Proceedings of the 20th ACM international conference on Multimedia

Quantified Score

Hi-index	0.00

Visualization

Abstract

With the rapid development and popularity of IT technology, criminals and mischievous computer users are given avenues to commit crimes and malicious activities. As forensic science has long been used to resolve legal disputes regarding different branches of science, computer forensics is developed naturally in the aspects of computer crimes or misbehaviors. In computer forensics, temporal analysis plays a significant role in the reconstruction of events or crimes. Indeed, temporal analysis is one of the attractive areas in computer forensics that caused a large number of researches and studies. It is the purpose of this paper to focus on temporal analysis on NTFS file system and to project intuitional rules on the behavioral characteristics of related digital files.