Triage in Live Digital Forensic Analysis

Abstract

I. Introduction Digital communication techniques such as email, SMS, blogs etc. have progressed rapidly during the last two decades. Email is one of the most commonly used communication technique. Emails can be sent/received on laptops, computers and mobile phones as well as on some other digital devices such as PDAs and Notebooks. Despite its benefits, it can also lead to malware or cyber attacks in the digital society through different means. Generally, such attacks occur over the Internet and result in serious damages like misleading functionality or data theft. To prevent or suppress these kinds of attacks, pertinent procedures must be defined to identify such threats and respond to them quickly and appropriately. Digital forensics, also known as forensic computing, is a controlled and systematic investigation that entails collecting, analyzing and validating digital evidence. Data residing on a computer or an IT device is gathered in the first step. The gathered data might be in the shape of messages, logs or email etc. Then log analysis indentifies part of the system infected by the Abstract-Due to frequent use of Internet and with technological advancements, cyber and malware attacks over the digital devices have increased manifold. Activities performed electronically can be investigated by means of digital forensic analysis methodologies. Live digital forensic tools are used for digital evidence collection and investigations of malicious activities that occurred on a standalone system or networks. Since compromised system remains active while using these tools, some serious issues relating to malicious functionalities and policy violations could lead to serious damages like data theft or data loss. In this paper, we present a critical review of the triage in live forensic. This paper discusses several techniques being used for performing live forensic analysis and critically evaluate their efficacy in terms of their applicability and reliability. A brief anecdote about the pros and cons of these techniques are also discussed. We present the findings of our study in the critical section.

Data Protection Techniques for Building Trust in Cloud Computing

“…Rafique and Khan [26] explored various methods, practices and tools being used for static and live digital forensics. In [27], Bashir and Khan discuss triaging methodologies being used for live digital forensic analysis. References [28][29][30][31][32][33][34][35][36][37][38][39][40][41][42][43][44] reviewed different techniques in different domains and reported their critical evaluations along with a workable framework where necessary.…”

An Appraisal of Off-line Signature Verification Techniques

“…Rafique and Khan [29] explored various methods, practices and tools being used for static and live digital forensics. In [30], Bashir and Khan discuss triaging methodologies being used for live digital forensic analysis. References [31][32][33][34][35][36][37][38][39][40][41][42][43][44][45][46][47] Gray scale and binary image.…”

A Review of Value Based Software Engineering and its Impacts

“…Rafique and Khan [38] explored various methods, practices and tools being used for static and live digital forensics. In [39], Bashir and Khan discuss triaging methodologies being used for live digital forensic analysis. …”