Classification and recovery of data from flash memory

Classification and recovery of data are critical components of digital forensics. Numerous forensic activities need the decoding of memory dumps, the interpretation of residual data, and the recovery of data from crashed hard drives. Typically, a forensic analyst is tasked with determining the under...

Full description

Saved in:
Bibliographic Details
Main Author: Lim, Wei
Other Authors: Lap-Pui Chau
Format: Final Year Project
Language:English
Published: Nanyang Technological University 2022
Subjects:
Online Access:https://hdl.handle.net/10356/158415
Tags: Add Tag
No Tags, Be the first to tag this record!
Institution: Nanyang Technological University
Language: English
Description
Summary:Classification and recovery of data are critical components of digital forensics. Numerous forensic activities need the decoding of memory dumps, the interpretation of residual data, and the recovery of data from crashed hard drives. Typically, a forensic analyst is tasked with determining the underlying file types when supplied with only file fragments and no access to the file system. The motivation is to apply various methods of feature extraction from file fragments in conjunction with machine learning and artificial intelligence for the task of file format categorization. This project will evaluate, test, and compare the accuracy and performance of the Fragments-Expert software in file fragment classification.