Reconstructing Fragmented YAFFS2 Files for Forensic Analysis
نویسندگان
چکیده
منابع مشابه
Reconstructing Fragmented YAFFS2 Files for Forensic Analysis
Data recovery from captured intelligent mobile devices such as smartphones plays a significant role in digital forensic analysis. In this paper, we study the main characteristics of NAND flash and YAFFS2 file systems and explore the method for recovering YAFFS2 files for forensic analysis based on Tnode tree that can save a lot of time compared to other data recovery methods. For any broken fil...
متن کاملForensic Analysis of YAFFS2
In contrast to traditional file systems designed for hard disks, the file systems used within smartphones and embedded devices have not been fully analyzed from a forensic perspective. Many modern smartphones make use of the NAND flash file system YAFFS2. In this paper we provide an overview of the file system YAFFS2 from the viewpoint of digital forensics. We show how garbage collection and we...
متن کاملReconstructing fragmented gel files created by Model 377 DNA Sequencers.
To our knowledge, the most widely used automated DNA sequencers are manufactured by PE Applied Biosystems (Foster City, CA, USA). Our laboratory uses Model 377 Sequencers equipped with the XL upgrade (i.e., collection software Version 2.0 and analysis software Version 3.0). Power transients, network noise, an excessively fragmented hard disk or other such incidents can cause a sequencer to prem...
متن کاملForensic analysis of the android file system YAFFS2
The popularity of Android devices has resulted in a requirement for a process to extract and analyse data in a forensically sound manner. There is a wide range of devices which use the Android operating system, and hence a standard process for forensic extraction and analysis for all devices is not possible. Many devices use the Yet Another Flash File System (YAFFS), which introduces an additio...
متن کاملForensic Analysis of Windows Thumbcache files
A range of court cases and forensic investigations have involved thumbnail pictures contained within operating system files, such as thumbcache and thumbs.db. In many of these cases, the thumbnail image has been the evidence presented to a court. Further analysis may locate additional information relating to thumbnail pictures, such as being able to link a thumbnail to a picture file on storage...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
ژورنال
عنوان ژورنال: International Journal of Hybrid Information Technology
سال: 2015
ISSN: 1738-9968
DOI: 10.14257/ijhit.2015.8.7.04