Improving sector hash carving with rule-based and entropy-based non-probative block filters
Approved for public release; distribution is unlimited === Digital forensic investigators have traditionally used file hashes to identify known content on searched media. Recently, sector hashing has been proposed as an alternative identification method, in which files are broken up into blocks, whi...
| Main Author: | |
|---|---|
| Other Authors: | |
| Published: |
Monterey, California: Naval Postgraduate School
2015
|
| Online Access: | http://hdl.handle.net/10945/45194 |