• Corpus ID: 14534665

Cyber Dumpster-Diving : $ Recycle . Bin Forensics for Windows 7 and Windows Vista

@inproceedings{Leschke2009CyberD,
  title={Cyber Dumpster-Diving : \$ Recycle . Bin Forensics for Windows 7 and Windows Vista},
  author={Timothy R. Leschke},
  year={2009}
}
Analysis of deleted files often provides useful information for the forensic computer examiner. Knowing where to find the deleted files, and how to interpret the metadata associated with the file’s deletion, make up the cornerstone of a successful forensic computer examination. Much like an office trash-can, the Microsoft Windows Recycle Bin is a temporary holding container for files that have been recently discarded (deleted) by the user. Microsoft first introduced the Recycle Bin with its… 
3 Citations
Shadow Volume Trash : $ Recycle . Bin Forensics for Windows 7 and Windows Vista Shadow Volumes
TLDR
The author concludes his exposition by suggesting the forensic computer examiner should use the software tool Shadow Miner, a tool that automates the forensic examination of Recycle Bin data that has been archived into a shadow volume.
An automated forensic tool for image metadata and Windows 7 Recycle Bin
  • T. Mehrotra, B. Mehtre
  • Computer Science
    2014 International Conference on Control, Instrumentation, Communication and Computational Technologies (ICCICCT)
  • 2014
TLDR
A python based tool which will have two separate functionalities which will automate the complete process of image metadata analysis, extracting coordinates information from metadata and locating the image geographically using Google Earth & KML (Keyhole markup language).
Digital Forensic Investigation using WinHex Tool
TLDR
Main focus of this paper is the complete investigation procedure of storage media and explains emerging cyber crimes and its digital forensic investigation procedures using digital forensic tools and techniques.

References

SHOWING 1-6 OF 6 REFERENCES
How the Recycle Bin Stores Files
  • How the Recycle Bin Stores Files
  • 2009
Introduction to file systems
  • Introduction to file systems
  • 2009
SID Components
  • SID Components
  • 2009
What does desktop.ini do
  • Ieinfosite
  • 2009
The Forensic Analysis of the Microsoft Windows Vista Recycle Bin
  • The Forensic Analysis of the Microsoft Windows Vista Recycle Bin
  • 2008
The Official CHFI Study Guide (Exam 312-49)
  • The Official CHFI Study Guide (Exam 312-49)
  • 2007