A New Approach for Creating Forensic Hashsets

@inproceedings{Ruback2012ANA,
  title={A New Approach for Creating Forensic Hashsets},
  author={Marcelo Ruback and Bruno W. P. Hoelz and C{\'e}lia Ghedini Ralha},
  booktitle={IFIP Int. Conf. Digital Forensics},
  year={2012}
}
The large amounts of data that have to be processed and analyzed by forensic investigators is a growing challenge. Using hashsets of known files to identify and filter irrelevant files in forensic investigations is not as effective as it could be, especially in non-English speaking countries. This paper describes the application of data mining techniques to identify irrelevant files from a sample of computers from a country or geographical region. The hashsets corresponding to these files are… CONTINUE READING