Developing a process model for the forensic extraction of information from desktop search applications

Přispěvatelé: Pavlic, Timothy, Slay, Jill, Turnbull, Benjamin Peter
Jazyk: angličtina
Rok vydání: 2008
Předmět:
Popis: Desktop search applications can contain cached copies of files that weredeleted from the file system. Forensic investigators see this as a potentialsource of evidence, as documents deleted by suspects may still exist in thecache. Whilst there have been attempts at recovering data collected by desktopsearch applications, there is no methodology governing the process, nordiscussion on the most appropriate means to do so. This article seeks to addressthis issue by developing a process model that can be applied when developingan information extraction application for desktop search applications,discussing preferred methods and the limitations of each. This work representsa more structured approach than other forms of current research. Refereed/Peer-reviewed
Databáze: OpenAIRE