Issue No. 12 - Dec. (2012 vol. 45)
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/MC.2012.327
Joel Young , Naval Postgraduate School
Kristina Foster , Naval Postgraduate School
Simson Garfinkel , Naval Postgraduate School
Kevin Fairbanks , Johns Hopkins University
Using an alternative approach to traditional file hashing, digital forensic investigators can hash individually sampled subject drives on sector boundaries and then check these hashes against a prebuilt database, making it possible to process raw media without reference to the underlying file system.
Digital forensics, Malware, Computers, Forensics, File systems, Cryptography, sector hashing, digital forensics, computer security
K. Fairbanks, S. Garfinkel, J. Young and K. Foster, "Distinct Sector Hashes for Target File Detection," in Computer, vol. 45, no. , pp. 28-35, 2012.