| Paper | Presentation | Conference | Downloads | Author |
|---|
| Behind the scenes of memory extraction | DFRWS USA 2019 | | Joe FitzPatrick |
| Forensic String Search Tool Quirks or What I Learned Testing String Search Tools | DFRWS USA 2019 |
| James Lyle |
| Introducing a New Method for Chip-Off Success: Vapor Phase | DFRWS USA 2019 | | Steve Watson (VTO Labs), David Rathbone (VTO Labs) |
| Introducing Digital Forensics Science in a Virtual Learning Environment | DFRWS USA 2019 |
| Eoghan Casey, Ph.D. (University of Lausanne), Daryl Pfeif (Digital Forensics Solutions and DFRWS), and Cassy Soden |
| Introduction to Ghidra Malware Analysis | DFRWS USA 2019 | | Erika Noerenberg (Carbon Black) |
| Investigating LOLBins & Scripts | DFRWS USA 2019 | | Alissa Torres |
| CASE Workshop | DFRWS EU 2019 | | Cory Hall (MITRE) |
| Characteristics and Detectability of Windows Auto-Start Extensibility Points in Memory Forensics | DFRWS EU 2019 | | Daniel Uroz, Ricardo J. |
| Chrome Nuts and Bolts: ChromeOS /Chromebook Forensics | DFRWS EU 2019 | | Jessica Hyde, Jad Saliba |
| Clearly Conveying the Science behind Automated Correlation Systems | DFRWS EU 2019 | | Timothy Bollé, Eoghan Casey, Ph.D. |
| Comprehending the IoT Cyber Threat Landscape: A Data Dimensionality Reduction Technique to Infer and Characterize Internet-scale IoT Probing Campaigns | DFRWS EU 2019 | | Morteza Safaei, Elias Bou-Harb, Kavita Varma, Nataliia Neshenko, Dimitris Pados, Kim-Kwang Raymond Choo |
| Deleted File Fragment Dating by Analysis of Allocated Neighbors | DFRWS EU 2019 | | Ahmed Bahjat, Jim Jones |
| KAPE: What’s all the buzz about? | DFRWS USA 2019 | | Mark Hallman (SANS Institute) |
| The Cyber-investigation Analysis Standard Expression (CASE) | DFRWS USA 2019 | | Cory Hall |
| A Practitioner Survey Exploring the Value of Forensic Tools, AI, Filtering, & Safer Presentation for Investigating Child Sexual Abuse Material (CSAM) | DFRWS USA 2019 |
| Laura Sanchez (University of New Haven), Cinthya Grajeda Mendez (University of New Haven), Ibrahim Baggili (University of New Haven), Frank Breitinger (University of New Haven) |
| AFF4-L: A scalable open logical evidence container | DFRWS USA 2019 |
| Bradley Schatz, Ph.D. (Schatz Forensic) |
| A Structural Concept and Tool for Forensic Data Analysis and Recovery of Deleted SQLite Records | DFRWS USA 2019 |
| Christian Meng (University of Applied Sciences, Darmstadt) and Harald Baier (University of Applied Sciences, Darmstadt) |
| DB3F & DF-Toolkit: The Database Forensic File Format and the Database Forensic Toolkit | DFRWS USA 2019 |
| James Wagner (DePaul University), Alexander Rasin (DePaul University), Karen Heart (DePaul University), Rebecca Jacob (DePaul University), Jonathan Grier (Grier Forensics) |
| Detection of Lateral Movement Across Valid Accounts by Using Human Behavior in the Physical Environment | DFRWS USA 2019 | | Tomohiko Yano |
| Digital Forensic Practices and Methodologies for AI Speaker Ecosystems | DFRWS USA 2019 |
| Wooyeon Jo (Ajou University), Yeonghun Shin (Ajou University), Hyungchan Kim (Ajou University), Dongkyun Yoo (Ajou University), Donghyun Kim (KITRI BoB), Cheulhoon Kang (Supreme Prosecutor's Office, Republic of Korea), Jongmin Jin (Supreme Prosecutor's Office, Republic of Korea), Junghoon Oh (Supreme Prosecutor's Office, Republic of Korea), Bitna Na (Ajou University), and Taeshik Shon (Ajou University) |
| FbHash: A New Similarity Hashing Scheme for Digital Forensics | DFRWS USA 2019 |
| Donghoon Chang (Indraprastha Institute of Information Technology, Delhi), Mohona Ghosh (Indira Gandhi Delhi Technical University of Women), Somitra Sanadhya (IIT Ropar), Monika Singh (NIST), and Douglas White (NIST) |
| Forensic analysis of the Nintendo 3DS NAND | DFRWS USA 2019 |
| Gus Pessolano (Norwich University), Huw Read (Norwich University), Iain Sutherland (Noroff University College), and Konstantinos Xynos (Noroff University College) |
| Forensic analysis of water damaged mobile devices | DFRWS USA 2019 |
| Aya Fukami (National Police Agency of Japan) and Kazuhiro Nishimura (National Police Agency of Japan) |
| Forensic Jailbreaking of iOS devices | DFRWS USA 2019 |
| Bradley Schatz, Ph.D. (Schatz Forensic) |
| HookTracer: A System for Automated and Accessible API Hooks Analysis | DFRWS USA 2019 |
| Golden Richard III, Ph.D. (Louisiana State University), Andrew Case (Volexity), Aisha Ali-Gombe (Townson Univeristy), Mingxuan Sun (LSU), Ryan Maggio (LSU), Md Firoz-Ul-Amin (LSU), and Mohammad Jalalzai (LSU) |
| Inception: Virtual Space in Memory Space in Real Space — Memory Forensics of Immersive Virtual Reality with the HTC Vive | DFRWS USA 2019 |
| Peter Casey (University of New Haven), Rebecca Lindsay-Decusati (University of New Haven), Ibrahim Baggili (University of New Haven), Frank Breitinger (University of New Haven) |
| Leveraging Electromagnetic Side-Channel Analysis for the Investigation of IoT Devices | DFRWS USA 2019 |
| Asanka Sayakkara (University College Dublin), Nhien An Le Khac (University College Dublin), Mark Scanlon, Ph.D. (University College Dublin) |
| Syntactical File Carving and Automated Generation of Reproducible Datasets | DFRWS USA 2019 |
| Jan-Niclas Hilgert (Fraunhofer FKIE), Martin Lambertz (Fraunhofer FKIE), Mariia Rybalka (Fraunhofer FKIE), and Roman Schell (Fraunhofer FKIE) |
| Using NTFS Cluster Allocation Behavior to Find the Location of User Data | DFRWS USA 2019 |
| Martin Karresand (Norwegian University of Science and Technology), Stefan Axelsson (Norwegian University of Science and Technology), Geir Olav Dyrkolbotn (NTNU) |
| Windows Memory Forensics: Detecting (un)intentionally hidden injected Code by examining Page Table Entries | DFRWS USA 2019 |
| Frank Block (ERNW Research GmbH) and Andreas Dewald (ERNW Research GmbH) |