The Evidentiary Value of Link Files in Linux File System to Digital Forensic Investigation.
Tharmini JanarthananShahrzad ZargariPublished in: CIT/IUCC/DASC/PICom (2015)
Keyphrases
- file system
- digital forensics
- forensic analysis
- data transfer
- computer forensics
- law enforcement
- access patterns
- storage systems
- flash memory
- continuous media
- search tools
- multi tiered
- linux kernel
- naming conventions
- metadata management
- storage devices
- database systems
- embedded systems
- distributed systems
- query processing