47 results about "Digital forensics" patented technology

Disclosed are compositions, methods, and kits, for issuing and conducting automated imaging and preservation for obtaining digital forensic data from active (i.e., powered-on) and non-active (i.e., powered-off) computer systems. In certain embodiments, the invention further encompasses providing a customer base a preliminary report of data. In other embodiments, the invention encompasses the option to receive a virtual machine file set of the acquired information for additional viewing and examination by the customer. The invention further encompasses methods and systems for implementing the embodiments of the invention. The invention also encompasses methods, apparatuses, and systems for secure forensic investigation of a target machine.

Provided are an apparatus and method for searching for digital forensic data. In particular, provided are an apparatus and method for searching for digital forensic data capable of automatically determining a character encoding type that is used in searching for data. The apparatus for searching for digital forensic data includes: an imaging module for generating an image file from a data source; a file system analysis module for analyzing a file system of the image file to generate file system analysis information; a search module for determining a search character encoding type based on the file system analysis information and searching for the data using the search character encoding type; and a user interface for receiving a command related to a search from a user, transmitting the received command to the file system analysis module and the search module, and outputting the search results to the user. In searching for digital forensic data, information on an operating system, a processor and an active character encoding type, which are actually used by a suspect, is extracted to determine a search character encoding type, so that accuracy and efficiency of searching for data are increased, and time, effort and money spent in determining a character encoding type are reduced.

New digital forensic techniques and systems are disclosed. System call information is collected from a device under test (DUT) and converted to a sequence format. Thereafter, sequence alignment methods and tools can be used to investigate and identify patterns of behavior that are suspicious.

A method and apparatus for digital forensics are provided. The apparatus for digital forensics includes a page file extractor for extracting a page file stored in a target storage medium, a stored-page feature extractor for extracting features of pages stored in the extracted page file, a page classifier for comparing the extracted features of the pages with at least one predetermined classification criterion and classifying the pages according to the comparison results, and a digital forensics unit for performing digital forensics according to the classified pages. According to the method and apparatus, it is possible to perform digital forensics using only information of a page file.

Provided are systems and methods for remote collection, preservation, and analysis of computer-based evidence in the course of conducting a network-based forensics or electronic discovery service. The challenge is to collect and analyze Electronically Stored Information (ESI) in a forensically sound manner over public and private networks. This is achieved via network-based forensics that may be conducted via an end user computer communicating directly with one or more subject computers across public or private networks, or it may be achieved via a “cloud computing” model whereupon the end user obtains, from the Internet, temporary use of shared resources, software, and information for the purpose of conducting digital forensics and eDiscovery upon subject computers.

A digital forensic image verification system, according to one embodiment of the present invention, is provided with: a photographing device comprising a photographing unit for generating an image, afirst hash value generation unit for generating a first hash value for the image, and a transmission unit for transmitting the image and the first hash value; and an image saving device comprising a reception unit for receiving the image and the first hash value from the photographing device, a second hash value generation unit for generating a second hash value for the image, and a control unit for comparing the first hash value and the second hash value with each other.

The invention discloses a digital forensics method based on blockchain privacy protection and fine-grained access control. The first supervisor creates a digital forensics transaction, initiates a digital forensics transaction request to the second supervisor, and transmits important information of the digital forensics transaction to the second supervisor. Two regulators; the second regulator generates attribute encryption intermediate parameters through the encryption module, and authorizes and publishes them in the blockchain; after the first regulator is authorized, it obtains the shard key from the key management institution module through the authorization information, and Combine the fragmentation keys to generate a decryption key, and the data acquisition module collects data in the storage system through the decryption key; the first supervisor analyzes the data after collecting the data, and obtains the data analysis results; then generates a digital report for forensics, and the forensics is completed ; The present invention utilizes the potential of blockchain and smart contracts, and designs encryption primitives to build a blockchain-based Internet of Vehicles digital forensics solution, which has auditability, privacy protection and fine-grained data access control.