Dustin Decker

Digital Forensic Artifacts: “Evidence Of …”

“Evidence Of …”
Where to find goodies – and where the bodies are buried.

Digital forensic artifacts are pieces of information that can be gathered from electronic devices and computer systems during a digital forensic investigation. These artifacts can provide important evidence that can be used in legal cases, security investigations, or other types of digital analysis.

Some examples of digital forensic artifacts include:

  1. System logs: Logs that record system activity such as login attempts, network connections, and application usage.
  2. Registry entries: Entries that record information about the configuration and usage of software and hardware.
  3. File metadata: Data that describes the attributes of a file, such as its creation date, modification date, and access date.
  4. Internet history: Records of websites visited, search queries, and downloads.
  5. Email headers: Information that identifies the sender and receiver of an email, as well as the email’s path through various servers.
  6. Deleted files: Files that have been deleted from a device but can still be recovered through forensic analysis.
  7. Chat logs: Records of instant messaging or other chat conversations.
  8. GPS data: Location data collected by a device’s GPS receiver.
  9. Social media data: Information gathered from social media platforms, such as posts, comments, and likes.
  10. Malware: Evidence of malicious software, such as virus or Trojan horse, that may have infected a device.
Digital Forensic Artifacts
Digital Forensic Artifacts