Data Acquisition from Cloud Network Storage

Lutui, Raymond; Cusack, Brian

doi:10.1109/itnac53136.2021.9652168

Cited by 1 publication

(1 citation statement)

References 28 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…One notable feature of AVML is its ability to obtain a raw memory dump within the kernel space without requiring prior knowledge of the target operating system or kernel [34]. Notably, the memory acquisition process is achieved with minimal interaction, eliminating the need for the addition of kernel modules [35].…”

Section: Methodsmentioning

confidence: 99%

A holistic digital forensic analysis of Discord – Storage, memory, and network perspectives

Gupta,

Lanka,

Varol

2024

Journal of Forensic Sciences

View full text Add to dashboard Cite

In the last decade, the market share and user base of social media applications have witnessed significant growth. However, this surge in popularity has inadvertently drawn the attention of criminals aiming to exploit these platforms for illicit activities. The forensic examination of these applications emerges as a pivotal avenue for uncovering valuable insights into criminal behavior and identifying suspects. Discord, a social media platform, has become a significant focal point for such illicit activities. In this paper, we examine the remnants of Discord on both Windows and Linux operating systems, employing storage, memory, and network analysis techniques to review the remnants of Discord. Our investigation reveals a range of crucial artifacts that have been successfully recovered across all three areas of analysis, including login and payment details, chat history, account information, and much more. Collectively, these artifacts constitute a valuable resource for forensic investigations, allowing the reconstruction of most of the user's activity.

show abstract

Section: Methodsmentioning

confidence: 99%