Journal article
SyncTriage: using synchronisation artefacts to optimize acquisition order
- Abstract:
- While the number and variety of devices can be problematic in a digital investigation, this is also a problem for consumers. As a result, software developers are implementing synchronisation features to assist customers handle the multitude of devices that they now use. This paper describes how these synchronisation features can be exploited as part of a digital investigation to use the results from the examination of one device to infer content of other devices. This extracted information is potentially useful in determining the devices that should have the most resources expended during an investigation to obtain the most actionable evidence in the quickest and most efficient manner.
- Publication status:
- Published
- Peer review status:
- Peer reviewed
Actions
Access Document
- Files:
-
-
(Preview, Version of record, pdf, 3.8MB, Terms of use)
-
- Publisher copy:
- 10.1016/j.diin.2019.01.022
Authors
- Publisher:
- Elsevier
- Journal:
- Digital Investigation More from this journal
- Volume:
- 28
- Issue:
- Supplement
- Pages:
- S134-S140
- Publication date:
- 2019-04-01
- Acceptance date:
- 2018-12-20
- DOI:
- ISSN:
-
1742-2876
- Pubs id:
-
pubs:976885
- UUID:
-
uuid:73970142-0e32-44ee-8328-393b890024aa
- Local pid:
-
pubs:976885
- Source identifiers:
-
976885
- Deposit date:
-
2019-04-29
- ARK identifier:
Terms of use
- Copyright holder:
- Hargreaves et al
- Copyright date:
- 2019
- Notes:
- © 2019 The Author(s). Published by Elsevier Ltd on behalf of DFRWS. This is an open access article under the CC BY-NC-ND license (http://creativecommons.org/licenses/by-nc-nd/4.0/).
If you are the owner of this record, you can report an update to it here: Report update to this record