Distinct Sector Hashes for Target File Detection
2012; IEEE Computer Society; Volume: 45; Issue: 12 Linguagem: Inglês
10.1109/mc.2012.327
ISSN1558-0814
AutoresJoel Young, Kristina Foster, Simson Garfinkel, Kevin D. Fairbanks,
Tópico(s)Advanced Steganography and Watermarking Techniques
ResumoUsing an alternative approach to traditional file hashing, digital forensic investigators can hash individually sampled subject drives on sector boundaries and then check these hashes against a prebuilt database, making it possible to process raw media without reference to the underlying file system.
Referência(s)