More Like this

1. IoT Botnet Forensics: A Comprehensive Digital Forensic Case Study on Mirai Botnet Servers

   https://doi.org/10.1016/j.fsidi.2020.300926  

   Zhang, Xiaolu ; Upton, Oren ; Beebe, Nicole Lang ; Choo, Kim-Kwang Raymond ( April 2020 , Forensic Science International: Digital Investigation)
2. A Scalable Platform for Enabling the Forensic Investigation of Exploited IoT Devices and Their Generated Unsolicited Activities

   https://doi.org/10.1016/j.fsidi.2020.300922  

   Torabi, Sadegh ; Bou-Harb, Elias ; Assi, Chadi ; Debbabi, Mourad ( April 2020 , Forensic Science International: Digital Investigation)

   null (Ed.)
3. Forensic Artifact Finder (ForensicAF): An Approach & Tool for Leveraging Crowd-Sourced Curated Forensic Artifacts

   https://doi.org/10.1145/3465481.3470051  

   Balon, Tyler ; Herlopian, Krikor ; Baggili, Ibrahim ; Grajeda-Mendez, Cinthya ( August 2021 , International Conference Proceeding Series (ICPS), ARES 2021: The 16th International Conference on Availability, Reliability and Security)
4. DB3F & DF-Toolkit: The Database Forensic File Format and the Database Forensic Toolkit

   https://doi.org/10.1016/j.diin.2019.04.010  

   Wagner, James ; Rasin, Alexander ; Heart, Karen ; Jacob, Rebecca ; Grier, Jonathan ( July 2019 , Digital Investigation)

   null (Ed.)
5. DB3F & DF-Toolkit:The Database Forensic File Format and the Database Forensic Toolkit

   Wagner, James ; Rasin, Alexander ; Heart, Karen ; Jacob, Rebecca ; Grier, Jonathan ( January 2019 , DFRWS 2019)

   The majority of sensitive and personal user data is stored in different Database Management Systems (DBMS). For example, Oracle is frequently used to store corporate data, MySQL serves as the back-end storage for most webstores, and SQLite stores personal data such as SMS messages on a phone or browser bookmarks. Each DBMS manages its own storage (within the operating system), thus databases require their own set of forensic tools. While database carving solutions have been built by multiple research groups, forensic investigators today still lack the tools necessary to analyze DBMS forensic artifacts. The unique nature of database storage and the resulting forensic artifacts require established standards for artifact storage and viewing mechanisms in order for such advanced analysis tools to be developed. In this paper, we present 1) a standard storage format, Database Forensic File Format (DB3F), for database forensic tools output that follows the guidelines established by other (file system) forensic tools, and 2) a view and search toolkit, Database Forensic Toolkit (DF-Toolkit), that enables the analysis of data stored in our database forensic format. Using our prototype implementation, we demonstrate that our toolkit follows the state-of-the-art design used by current forensic tools and offers easy-to-interpret database artifact search capabilities. 

   more » « less