We present FiFTy, a modern file-type identification tool for memory forensics and data
carving. In contrast to previous approaches based on hand-crafted features, we design a …

Automated systems allow forensic practitioners to perform analysis tasks that would
otherwise be infeasible. However, unless the outputs of such systems are critically evaluated …

File fragment type identification is an important step in file carving and data recovery.
Machine learning techniques, especially neural networks, have been utilized for this …

This paper presents an approach to improve the file fragment classification by proposing
new features for classification and evaluating them on a dataset that includes both low-and …

There is a significant amount of research in digital forensics into analyzing file fragments or
reconstructing fragmented data. At the same time, there are no recent measurements of …

Orphaned file fragment carving is concerned with recovering contents of encoded data in the
absence of any coding metadata. Constructing an orphaned file carver requires addressing …

Analysis of imaging sensors is one of the most reliable photo forensic techniques, but it is
increasingly challenged by complex image processing in modern cameras. The underlying …

Recovery of deleted JPEG files is severely hindered by fragmentation. Current state-of-the-
art JPEG file recovery methods rely on content-based approaches. That is, they consider …

This paper proposes a syntactical method for reconstructing OOXML documents based on
knowledge about the internal structure of this file type, regardless of their content. The …

File carving techniques are important in the field of digital forensics. At the same time, the
rapid growth in the amount and types of data requires the development of file carving …