Abstract:The field of computer forensics emerged in response to the substantial increase in computer-related crimes occurring annually. This rise in criminal activity can be attributed to the rapid expansion of the internet, which has provided perpetrators with increased opportunities for illicit actions. When a computer system is compromised and an intrusion is detected, it becomes crucial for a specialized forensics team to investigate the incident with the objective of identifying and tracing the responsible party. The outcome of such forensic efforts often leads to legal action being taken against those accountable for the wrongdoing. The methodology employed in computer forensics continually evolves alongside advancements in crime approaches, particularly as attackers leverage emerging technologies. To ensure the accuracy of forensic investigations, it is imperative that the scientific knowledge underlying the forensic process be complemented by the integration of technological tools. A plethora of hardware and software options are available to facilitate the analysis and interpretation of forensic data, thereby enhancing the efficiency and effectiveness of investigations. While the fundamental objectives of computer forensics primarily involve the seamless preservation, identification, extraction, documentation, and analysis of data, the widespread adoption of this discipline is contingent upon the law enforcement community's ability to keep pace with advancements in computing technology. Furthermore, the prevalence of diverse computer devices resulting from the emergence of microcomputer technology also plays a crucial role in shaping the field of computer forensics. This research paper aims to provide a comprehensive overview of computer forensics, encompassing advanced methodologies and detailing various technology tools that facilitate the forensic process. Specific areas of focus include the analysis of encrypted drives, disk analysis techniques, analysis toolkits, investigations involving volatile memory, and the examination of captured network packets. By exploring these aspects, this paper aims to contribute to the existing body of knowledge in the field of computer forensics and support practitioners in their pursuit of effective investigative techniques.

An Authorship Analysis Model MBSFAM in Software Forensics

A Survey of Digital Passive Lossless Forensics on Forged and Altered Document

Authorship Attribution in the Era of LLMs: Problems, Methodologies, and Challenges

More than Word Frequencies: Authorship Attribution via Natural Frequency Zoned Word Distribution Analysis

A Dynamic Forensics Model Based on Intrusion Detection System

Modeling and Analyzing Dynamic Forensics System Based on Intrusion Tolerance

Authorship Identification from Unstructured Texts

A Bayesian Approach to Harnessing the Power of LLMs in Authorship Attribution

A Practical Black-Box Attack on Source Code Authorship Identification Classifiers

Research on Effectively Supported Computer Forensic Audit Mechanism

Textual Fingerprinting with Texts from Parkin, Bassewitz, and Leander

Recognizing and Imitating Programmer Style: Adversaries in Program Authorship Attribution

Study on Social Network Forensics

Is the Digital Forensics and Incident Response Pipeline Ready for Text-Based Threats in LLM Era?

Design and Implementation of Malware Automated Analysis Tool Based on Behavior Analysis

Discussion on Computer Forensics

Computer Forensics and Advanced Methodology

Vulnerability Analysis Framework for Binaries Based on Model Checking

Defending Against Authorship Identification Attacks

AuthAttLyzer-V2: Unveiling Code Authorship Attribution using Enhanced Ensemble Learning Models & Generating Benchmark Dataset

Authorship Attribution with Topic Drift Model