Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Publications by: Sheldon Douglas (Fed)

Displaying 1 - 1 of 1

Provenience-based cross-verification of digital forensic artifacts applied to NTFS

February 19, 2024

Author(s)

Alexander Nelson, Sheldon Douglas

In digital forensics, file system analysis is a precursor task to event reconstruction. Often, unallocated content within a file system is content of interest to an investigation, and thus recognition, extraction, and ascription of unallocated files are