Advances in Digital Forensics XX

Digital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence. Computer networks, cloud computing, smartphones, embedded devices and the Internet of Things have expanded the role of digital forensics beyond traditional computer crime investigations, with practically every crime now involving some aspect of digital evidence. Digital forensics provides the techniques and tools to articulate such evidence in legal proceedings. Along with a myriad of intelligence applications, Digital forensics also plays a vital role in cyber security – investigations of security breaches yield valuable information that can be used to design more secure and resilient systems. This book, Advances in Digital Forensics XX, is the twentieth volume in the annual series produced by the IFIP Working Group 11.9 on Digital Forensics, an international community of scientists, engineers and practitioners dedicated to advancing the state of the art of research and practice in Digital forensics. This book presents original research results and innovative applications in digital forensics. It also highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations. This volume contains fifteen revised and edited chapters based on papers presented at the Twentieth IFIP WG 11.9 International Conference on Digital Forensics, held in New Delhi, India, on January 4-5, 2024. A total of 32 full-length papers were submitted for presentation at the conference. The chapters present in this volume have been organized into seven thematic sections: Themes and Issues; Mobile Device Forensics; Image and Video Forensics; Internet of Things Forensics; Malware Forensics; Filesystem Forensics & Forensic Investigations.