Understanding and comparing digital traces

Simple item page
dc.contributor.authorHorsman, Graeme
dc.date.accessioned2024-08-06T09:55:49Z
dc.date.available2024-08-06T09:55:49Z
dc.date.freetoread2024-08-06
dc.date.issued2024-07-25
dc.description.abstractDigital forensic practitioners will encounter digital traces during their examinations which they must take steps to understand. This may involve trying to attribute an ‘activity’ to a trace (what created it) or determine where it came from (its ‘source’) – Trace-to-Activity/Source interpretation. Alternatively, they may need to determine if an activity has taken place on a system by identifying traces denoting it – Activity-to-Trace interpretation. In both instances, practitioners may need to conduct tests and/or identify research which will help them understand a trace, and compare any results of their testing/research to the traces in their casework. This work describes both the Trace-to-Activity/Source and Activity-to-Trace interpretive journeys, as well as the steps contained in both. In addition, six ‘trace comparison criteria’ are proposed and discussed to help those carrying out a trace comparison, notably: ‘trace location’, ‘trace structure’, ‘trace examination method’, ‘trace metadata’, ‘trace content’, and ‘trace context’.
dc.description.journalNameAustralian Journal of Forensic Sciences
dc.identifier.citationHorsman G. (2024) Understanding and comparing digital traces. Australian Journal of Forensic Sciences, Available online 25 July 2024
dc.identifier.eissn1834-562X
dc.identifier.issn0045-0618
dc.identifier.urihttps://doi.org/10.1080/00450618.2024.2381535
dc.identifier.urihttps://dspace.lib.cranfield.ac.uk/handle/1826/22727
dc.language.isoen
dc.publisherTaylor and Francis
dc.publisher.urihttps://www.tandfonline.com/doi/full/10.1080/00450618.2024.2381535
dc.rightsAttribution 4.0 Internationalen
dc.rights.urihttp://creativecommons.org/licenses/by/4.0/
dc.subjectDigital forensics
dc.subjectdigital trace
dc.subjectdigital evidence
dc.subjecttesting
dc.subjectinterpretation
dc.titleUnderstanding and comparing digital traces
dc.typeArticle
dcterms.dateAccepted2024-06-09

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
Understanding_and_comparing_digital_traces-2024.pdf
Size:
2.31 MB
Format:
Adobe Portable Document Format
Download
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
1.63 KB
Format:
Item-specific license agreed upon to submission
Description:
Download

Collections

Staff publications (CDS)