Paper | Presentation Conference Downloads Author
Using the HFS+ Journal For Deleted File Recovery DFRWS USA 2008 Aaron Burghardt, Adam Feldman
10 Good Reasons Why You Should Shift Focus to Small Scale Digital Device Forensics DFRWS USA 2007 Ronald van der Knijff
A Brief Study of Time DFRWS USA 2007 Florian Buchholz, Brett Tjaden
An Efficient Technique for Enhancing Forensic Capabilities of Ext2 File System DFRWS USA 2007 Mridul Sankar Barik, Gaurav Gupta, Shubhro Sinha, Alok Mishra, Chandan Mazumdara
Analyzing Multiple Logs for Forensic Evidence DFRWS USA 2007 Ali Reza Arasteh, Mourad Debbabi, Assaad Sakha, Mohamed Saleh
Automated Windows Event Log Forensics DFRWS USA 2007 Rich Murphey
BodySnatcher - Towards Reliable Volatile Memory Acquisition by Software DFRWS USA 2007 Bradley Schatz, Ph.D.
Capture - A Tool for Behavioral Analysis of Applications and Documents DFRWS USA 2007 Christian Seifert, Ramon Steenson, Ian Welch, Peter Komisarczuk, Barbara Endicott-Popovsky
Carving Contiguous and Fragmented Files with Object Validation DFRWS USA 2007 Simson Garfinkel, Ph.D.
Digital Forensic Text String Searching - Improving Information Retrieval Effectiveness by Thematically Clustering Search Results DFRWS USA 2007 Nicole Beebe, Ph.D., Jan Clark
File Marshal - Automatic Extraction of Peer-to-Peer Data DFRWS USA 2007 Frank Adelstein, Ph.D., Rob Joyce
Forensic Data Recovery and Examination of Magnetic Swipe Card Cloning Devices DFRWS USA 2007 Gerry Masters, Philip Turner
Forensic Memory Analysis - From Stack and Code to Execution History DFRWS USA 2007 Mourad Debbabi
Introducing the Microsoft Vista Log File Format DFRWS USA 2007 Andreas Schuster
Issues with Imaging Drives Containing Faulty Sectors DFRWS USA 2007 James Lyle, Mark Wozar
Massive Threading - Using GPUs to Increase the Performance of Digital Forensics Tools DFRWS USA 2007 Lodovico Marziale, Golden Richard III, Ph.D., Vassil Roussev, Ph.D.
Multi-Resolution Similarity Hashing DFRWS USA 2007 Vassil Roussev, Ph.D., Golden Richard III, Ph.D., Lodovico Marziale
Specifying Digital Forensics - A Forensics Policy Approach DFRWS USA 2007 Carol Taylor, Barbara Endicott-Popovsky, Deborah Frincke
The VAD Tree - A Process-Eye View of Physical Memory DFRWS USA 2007 Brendan Dolan-Gavitt
A Correlation Method for Establishing Provenance of Timestamps in Digital Evidence DFRWS USA 2006 Bradley Schatz, Ph.D., George Mohay, Andrew Clark
A Cyber Forensics Ontology - Creating a New Approach to Studying Cyber Forensics DFRWS USA 2006 Ashley Brinson, Abigail Robinson, Marcus Rogers
A Strategy for Testing Hardware Write Block Devices DFRWS USA 2006 James Lyle
A Survey of Forensic Characterization Methods for Physical Devices DFRWS USA 2006 Nitin Khanna, Aravind Mikkilineni, Anthony Martone, Gazi Ali, George Chiu, Jan Allebach, Ed Delp
An Empirical Study of Automatic Event Reconstruction Systems DFRWS USA 2006 Sundararaman Jeyaraman, Mikhail Atallah
Arriving at an Anti-forensics Consensus - Examining How to Define and Control the Anti-forensics Problem DFRWS USA 2006 Ryan Harris
Categories of Digital Investigation Analysis Techniques Based On The Computer History Model DFRWS USA 2006 Brian Carrier (Honorary Board Member) , Ph.D., Prof. Eugene Spafford
Cross-Drive Analysis DFRWS USA 2006 Simson Garfinkel, Ph.D.
Current Cyber Investigation Challenges in Digital Forensics DFRWS USA 2006 Ted Lindsey
Detecting False Captioning Using Common Sense Reasoning DFRWS USA 2006 Sangwon Lee, David Shamma, Bruce Gooch
FORZA - Digital Forensics Investigation Framework That Incorporate Legal Issues DFRWS USA 2006
Identifying Almost Identical Files Using Context Triggered Piecewise Hashing DFRWS USA 2006 Jesse Kornblum
Issues in Building the Digital Forensics Bridge From Computer Science to Judicial Science DFRWS USA 2006 Michael Losavio, Deborah Wilson, Adel Elmaghraby, James Graham, S. Srinivasan, David Elder, Marcus Rogers
Knowledge Exploration, Analysis, and Discovery Workshop DFRWS USA 2006 Mark Maybury, Penny Chase
md5bloom - Forensic Filesystem Hashing Revisited DFRWS USA 2006 Vassil Roussev, Ph.D., Timothy Bourg, Yixin Chen, Golden Richard III, Ph.D.
Searching for Processes and Threads in Microsoft Windows Memory Dumps DFRWS USA 2006 Andreas Schuster
Selective and Intelligent Imaging using Digital Evidence Bags DFRWS USA 2006 Philip Turner
Self-Reported Computer Criminal Behavior - A Psychological Analysis DFRWS USA 2006 Marcus Rogers, Kathryn Seigfried-Spellar, Kirti Tidke
XIRAF - Ultimate Forensic Querying DFRWS USA 2006 Wouter Alink, Raoul Bhoedjang, Peter Boncz
Automated Digital Evidence Target Definition Using Outlier Analysis and Existing Evidence DFRWS USA 2005 Brian Carrier (Honorary Board Member) , Ph.D., Prof. Eugene Spafford
Automatically Creating Realistic Targets for Digital Forensics Investigation DFRWS USA 2005 Frank Adelstein, Ph.D., Yun Gao, Golden Richard III, Ph.D.
Data Hiding in Journaling File Systems DFRWS USA 2005 Knut Eckstein, Marko Jahnke
Design and Implementation of Zeitline - a Forensic Timeline Editor DFRWS USA 2005 Florian Buchholz, Courtney Falk
Evaluating Commercial Counter-Forensic Tools DFRWS USA 2005 Matthew Geiger
File Hound - A Forensics Tool for First Responders DFRWS USA 2005 Wm. Blair Gillam, Marc Rogers
Forensic Discovery DFRWS USA 2005 Wietse Venema, Ph.D.
Monitoring Access to Shared Memory-Mapped Files DFRWS USA 2005 Christian Sarmoria, Steve Chapin
Network Forensics Analysis with Evidence Graphs DFRWS USA 2005 Wei Wang, Thomas Daniels
Preparing for Large-Scale Investigations with Case Domain Modeling DFRWS USA 2005 Chris Bogen, David Dampier
Reproducibility of Digital Evidence in Forensic Investigations DFRWS USA 2005 Lei Pan, Lynn Batten
Risk Sensitive Digital Evidence Collection DFRWS USA 2005 Erin Kenneally, Christopher Brown
Scalpel - A Frugal, High Performance File Carver DFRWS USA 2005 Golden Richard III, Ph.D., Vassil Roussev, Ph.D.
Unification of Digital Evidence from Disparate Sources DFRWS USA 2005 Philip Turner
A Framework for Digital Forensic Science DFRWS USA 2004 Mark Pollitt
A Framework of Distributed Agent-based Network Forensics System DFRWS USA 2004 Ren Wei
A Hierarchical, Objectives-Based Framework for the Digital Investigations Process DFRWS USA 2004 Nicole Beebe, Ph.D., Jan Clark
An Event-Based Digital Forensic Investigation Framework DFRWS USA 2004 Brian Carrier (Honorary Board Member) , Ph.D., Prof. Eugene Spafford
Assured Information Security - Stego Intrusion Detection System DFRWS USA 2004 Mike Sieffert, Rodney Forbes, Charles Green, Leonard Popyack, Thomas Blake
BBN Systems - Adversary Modeling to Develop Forensic Observables DFRWS USA 2004 John Lowry, Rico Valdez, Brad Wood
Breaking the Performance Wall - The Case for Distributed Digital Forensics DFRWS USA 2004 Vassil Roussev, Ph.D., Golden Richard III, Ph.D.
Forensics for Critical Information Infrastructure Protection DFRWS USA 2004 Ian Bryant
Forensics, Fighter Pilots and the OODA Loop - The Role of Digital Forensics in Cyber Command and Control DFRWS USA 2004 Heather Dussault, Chet Maciag
Honeynet Data Analysis - A Technique For Correlating Sebek And Network Data DFRWS USA 2004 Edward Balas
Honeynets and Digital Forensics DFRWS USA 2004 Lance Spitzner
How to Reuse Knowledge about Forensic Investigations DFRWS USA 2004 Danilo Bruschi, Mattia Monga, Lorenzo Martignoni
MITRE - Proposal to Formalize Test and Evaluation Activities Within the Forensic and Law Enforcement Communities DFRWS USA 2004 Mark Hirsh
Secure Digital Camera DFRWS USA 2004 Paul Blythe, Jessica Fridrich
The Enhanced Digital Investigation Process Model DFRWS USA 2004 Venansius Baryamureeba, Florence Tushabe
A Functional Reference Model of Passive Network Origin Identification DFRWS USA 2003 Thomas Daniels
An Improved Raw Quick Pairs Blind Steganalysis Method DFRWS USA 2003 Benjamin Rodriquez
Building Theoretical Underpinnings for Digital Forensics Research DFRWS USA 2003 Sarah Mocas
Cross-Validation of Filesystem Layers for Computer Forensics DFRWS USA 2003 Joe Sremack
Detecting Covert Communications on the Internet - Some Challenges and Solutions DFRWS USA 2003 R. Chandramouli
Discovering Covert Digital Evidence DFRWS USA 2003 Chet Hosmer, Christopher Hyde
File Classification Using Sub-Sequence Kernels DFRWS USA 2003
Forensic Network Analysis Tools - Strengths, Weaknesses, and Future Needs DFRWS USA 2003 Eoghan Casey, Ph.D.
ForNet - A Distributed Network Forensics System DFRWS USA 2003 Kulesh Shanmugasundaram
Putting the Horse in Front of the Cart DFRWS USA 2003 Peter Stephenson
A Lessons Learned Repository for Computer Forensics DFRWS USA 2002 Warren Harrison, George Heuston, Mark Morrissey, David Aucsmith, Sarah Mocas, Steve Russelle
Analyzing the Difficulties in Backtracking the Onion Router's Traffic DFRWS USA 2002 Dario Forte
Audit Data Reduction Using Neural Networks and Support Vector Machines DFRWS USA 2002 Srinivas Mukkamala, Andrew Sung
Automatic Reassembly of Document Fragments via Data Compression DFRWS USA 2002 Kulesh Shanmugasundaram
Can Digital Evidence Endure the Test of Time DFRWS USA 2002 Michael Duren, Chet Hosmer
Confronting Encryption in Computer Investigations DFRWS USA 2002 Eoghan Casey, Ph.D.
Defining Digital Forensic Examination and Analysis Tools DFRWS USA 2002 Brian Carrier (Honorary Board Member) , Ph.D.
First Responders Evidence Disk DFRWS USA 2002 Jesse Kornblum
Language and Gender Author Cohort Analysis of E-mail for Computer Forensics DFRWS USA 2002 Malcolm Corney, Alison Anderson, George Mohay
Steganalysis with a Computational Immune System DFRWS USA 2002 Jacob Jackson, Gregg Gunsch, Roger Claypoole, Gary Lamont
Testing Disk Imaging Tools DFRWS USA 2002 James Lyle
The International Journal of Digital Evidence DFRWS USA 2002 Gary Gordon, John Leeson
The Mobile Forensic Platform DFRWS USA 2002 Frank Adelstein, Ph.D.
A Road Map for Digital Forensic Research DFRWS USA 2001