Forensic Techniques Research Articles

Designing an automated, privacy preserving, and efficient Digital Forensic Framework

<p class="MDPI18keywords">The digital forensic investigation field faces continual challenges due to rapid technological advancements, the widespread use of digital devices, and the exponential growth in stored data. Protecting data privacy has emerged as a critical concern, particularly as traditional forensic techniques grant investigators unrestricted access to potentially sensitive data. While existing research addresses either investigative effectiveness or data privacy, a comprehensive solution that balances both aspects remains elusive. This study introduces a novel digital forensic framework that employs case information, case profiles, and expert knowledge to automate analysis. Machine learning techniques are utilized to identify relevant evidence while prioritizing data privacy. The framework also enhances validation procedures, fostering transparency, and incorporates secure logging mechanisms for increased accountability.</p>

The role of ecogenomics in environmental and forensic discoveries

Ecogenomics is the application of genetic information and environmental science to understand the genetic diversity and functional potential of microbial communities in various environments. It involves the analysis of DNA and RNA sequences to gain insights into the structure, function, and dynamics of ecosystems. In the context of the environment, ecogenomics plays a crucial role in understanding the impact of human activities on natural ecosystems. By studying the genetic composition of microbial communities, researchers can assess the health and resilience of ecosystems, identify key species involved in nutrient cycling and energy flow, and monitor the effects of pollution and climate change. Ecogenomics also has significant applications in forensic research. By analyzing the microbial DNA present at crime scenes, forensic scientists can gain valuable information about the individuals involved. Microbes are ubiquitous and can be transferred from person to person, leaving behind a unique microbial signature that can be used for identification purposes. This approach, known as microbial forensics, can complement traditional forensic techniques and provide additional evidence in criminal investigations. By harnessing the power of genomics, researchers can uncover hidden microbial diversity, track ecosystem changes, and provide valuable insights into criminal investigations.

Trends, Challenges and Opportunities of Engaging Digital Forensics for Cybercrime Investigations

The use of digital forensic tools and techniques has continued to evolve as the security community makes efforts to stay ahead and mitigate cyber crimes. These tools and techniques are assisting cybersecurity experts and law enforcement in identifying fraudsters and protecting data by utilizing techniques such as digital traces left by data processing and storage. This paper identifies the peculiarities of digital forensics as a field of study, explores trends, challenges and opportunities presented by digital forensic tools in investigating cyber crimes. We carried out a systematic literature review of applicable tools and techniques. Our research identified challenges affecting the use of digital forensics in investigating cybercrime, and capture comprehensively the pulse of the domain. Recommendations were made that digital forensics lack a unified formal representation of standardized procedures and knowledge for analyzing and gathering digital artifacts. This inevitably causes incompatibility and conflict within various digital forensics tools. This leads to errors in the interpretation and analysis of digital artifacts due to lack of standardized or formalized procedure for analyzing, preserving, and collecting digital evidence is absent. Keywords: Cybercrimes, Police, Cyber Security, Challenges, Techniques

Forensic analysis of iOS binary cookie files.

iPhone operating system (iOS) devices utilize binary cookies as a data storage tool, encoding user-specific information within an often-neglected element of smartphone analysis. This binary format contains details such as cookie flags, expiration, and creation dates, domain, and value of the cookie. These data are invaluable for forensic investigations. This study presents a comprehensive methodology to decode and extract valuable data from these files, enhancing the ability to recover user activity information from iOS devices. This paper provides an in-depth forensic investigation into the structure and function of iOS binary cookie files. Our proposed forensic technique includes a combination of reverse engineering and custom-built Python scripts to decode the binary structure. The results of our research demonstrate that these cookie files can reveal an array of important digital traces, including user preferences, visited websites, and timestamps of online activities. It concludes that the forensic analysis of iOS binary cookie files can be a tool for forensic investigators and cybersecurity professionals. In the rapidly evolving domain of digital forensics, this research contributes to our understanding of less-explored data sources within iOS devices and their potential value in investigative contexts.

Species Identification of Rehabilitated Critically Endangered Orangutans Through DNA Forensic: Implication for Conservation.

Rehabilitating and releasing orangutans back into the wild is one of the conservation strategies being pursued to conserve orangutans. However, the species determination between Sumatran, Tapanuli, and Bornean orangutans is essential for reintroduction to avoid outbreeding depression, which could lead to DNA hybridisation and increase the probability of recessive characters. Here, we reported on an investigation of three orangutans in which DNA forensic techniques were used to identify the species before release and reintroduction to their habitat. By applying DNA forensic, the orangutan was successfully confirmed with high probabilities (100%) by identifying two orangutan species, Pongo abelii and Pongo pygmaeus wurmbii. Based on ambiguous morphology, we found the possibility of orangutan species being misidentified in rehabilitation. This case report demonstrates the importance of molecular diagnostics to identify the orangutan species. We also provide workflow recommendations from genetic aspect for rehabilitated orangutans. These recommendations will enable decision-makers to consider genetics when assessing future management decisions, which will help ensure that the orangutan species is effectively conserved.

ANALISIS BUKTI DIGITAL PADA APLIKASI DISCORD DESKTOP DENGAN MENGGUNAKAN FRAMEWORK DFRWS

A Currently, various communication platforms are available, and one of them is Discord. Discord is utilized by users to interact and share various types of content. However, Discord is often implicated in the distribution of inappropriate content that goes against Discord regulations. This can lead to cybercrime cases such as Child Sexual Abuse Material (CSAM). The main challenge faced is the recovery of digitally deleted data through these communication platforms. The objective of this research is to analyze digital evidence in the form of deleted text messages, images, and documents in the chat rooms of the desktop-based Discord application. The research method employed is the Live Forensic Technique, applying the DFRWS (Digital Forensics Research Workshop) method. The digital forensic analysis process is conducted using the digital forensic tool Magnet Axiom. The research results indicate that the accuracy of digital evidence analysis using Magnet Axiom reaches 94.11%. A total of 16 digital evidence items were successfully recovered out of the total 17 items available

Determinants of Forensic Accounting Techniques’ Choice on Fraudulent Practices’ Investigation in Nigeria: Moderating Effects of Cashless Policy

The issue of economic and financial crimes among other fraudulent practices in the past decades in Nigeria, has been in the front burner of scholars in regard to the potency of forensic accounting to tackle this menace. The choice of the techniques adopted for investigation purposes is argued to determine the success or otherwise of this. Thus, this study examined the determinants of forensic accounting techniques’ choice of practitioners in addition to the influence of cashless policy as a moderating factor. Research survey design was adopted for data collection through structured questionnaire on practitioners. Purposive sampling technique was used to determine the population and the sample size, which were 110 respondents. Data were analysed with the aid of descriptive and inferential statistics. Logistic regression results showed that size of fraud, organizational policies, and legal factors, have a positive but statistically insignificant effect, while educational attributes, industry attributes, professional fees, type of fraud, criminal evidence availability, and audit quality, showed a negative and insignificant effect on the forensic accounting techniques choice for fraudulent practices investigation. The results also depicted that the moderating variable (cashless policy) demonstrated a negative and insignificant effect on the relationship of the main variable, but with mixed results with individual components. This study, therefore, recommends that forensic accountants require a more in-depth knowledge of the respective technique and the type of the fraudulent practices, for effective and efficient forensic accounting investigation assignments.

An explainable deepfake of speech detection method with spectrograms and waveforms

Research on deepfake techniques for speech is crucial for combatting the spread of fake information, safeguarding public privacy, and advancing forensic techniques. However, the lack of transparency and explainability of spoofed speech detection models raises concerns about their reliability. In this paper, we suggest using raw waveform signals and spectrograms as fused features of the spoofed speech detection model. We use the SHAP method to analyze the feature distribution of spoofed speech detection and explain the likelihood of fake speech. Our experimental results demonstrate that our approach achieves better classification results with lighter model parameters than other feature fusion methods. Finally, the feature contribution values are calculated under the SHAP method to visualize them as heat maps. It helps researchers to analyze the feature distribution of spoofed speech to identify the most critical features that distinguish between spoofed and bona fide and to ensure transparency in their use.

The forensic imaging technique of age progression used within missing people cases: The Italian Missing Children association realizing age progression for Missing Child Kenya

The age progression technique allows to update identification photos of individuals who have been missing for years. This method is based on the study of the facial variation and on the dynamics of facial growth. Knowledge about changes in the distribution of facial fat and the tone of the cartilage allows realistic predictions of the facial appearance after many years. Beside these elements, age progression is also supported by similar characters between family members. This is why photos of the missing and family members are used to create an age progression, making the new identikit accurate.Non-profit associations are crucial for the dissemination of information on the problem of missing persons. In Italy, the Italian Missing Children association provides for free an age progression service with the support of forensic anthropology. With the activation of a protocol, consisting of guidelines, and a form for the request for age progression by family members, the Italian Missing Children has started a collaboration with Missing Child Kenya. It allowed to disseminate up-to-date photos of the presumed current appearance of the missing children in Kenya. Thus, in the present study some cases are reported, in which age progression technique was applied.The photos provided by Italian Missing Children were shown in video documentaries made by Missing Child Kenya, allowing to continue the dissemination of age progression photo during the Covid quarantines and to keep the population active in the search for the missing.

A forensic analysis of AnyDesk Remote Access application by using various forensic tools and techniques

This study delves into a forensic analysis of the AnyDesk Remote Access application, focusing prominently on disk forensic acquisitions. We aim to assess the security and privacy features of AnyDesk, uncovering insights vital for forensic investigators and potential adversaries. The recovery of artifacts from Android Mobile and Window-based PC devices, employing acquisition techniques, plays a pivotal role in forensic analysis. The study underscores the significance of log files, housing crucial details like user IDs, dates, transfer times, and file movements. Manual scrutiny of the extracted data establishes user connections and reveals user-centric information, encompassing wallpapers, chat logs, AnyDesk-IDs, and transferred files. As the data lacks encryption, artifacts are easily comprehensible and interlinked. AnyDesk-related files, including session recordings, media files, and documents, undergo successful extraction via forensic methods. Root permissions on the Android phone emerge as a critical asset, facilitating the identification of more reliable and concealed data. In contrast, on the PC, all files related to AnyDesk were identified through a combination of automatic and manual examination. In essence, this study provides profound insights into AnyDesk's security and privacy features, underscored by the instrumental role of forensic acquisitions in pinpointing and extracting pertinent data.

Distribution and Uniqueness in the Pattern of Lip Prints.

Introduction Lip prints are the characteristic pattern of wrinkles and grooves on the labial mucosa. Lip prints can be classified into various patterns and can be used for personal identification as they are unique and do not change during the life of a person. Cheiloscopy is a forensic investigation technique that deals with the identification of humans based on lip traces. Objectives This study aimed to investigate the distribution of lip print patterns, to assess gender differences, and to calculate the lip score using a weighted value scoring system. Material and methods A cross-sectional study was carried out in the Department of Anatomy, All India Institute of Medical Sciences (AIIMS), Guwahati, India, from May to October 2023, after getting approval from the Institutional Ethics Committee (IEC). A total of 200 individuals (100 males and 100 females) were included in the study. Each lip print was divided into four quadrants. In each quadrant, up to 14 grooves were marked from the midline, and the pattern of each groove was observed. Each pattern was given an Arabic numeral score. Weighted values were given for the grooves in descending order from 15 to 1 with reference to their position from the midline of the lip print.The product of the Arabic numeral score of the groove and the weighted value of the groove is the lip line score. The sum of the lip line scores was calculated. Results The most common pattern observed in the present study is type II, with 3,816/12,000 (31.8%), followed by type I'with 3,146/12,000 (26.21%), type I with 1,865/12000 (15.54%), type III with 1,491/12,000 (12.42%), type IV with 1,133/12,000 (9.44%), and type V with 549/12,000 (4.5%). The mean total lip score is 1,467.68 (1,486.41 in males and 1448.96 in females). Conclusion Lip prints are unique and useful for personal identification, as the lip score in various quadrants and the total lip score are different for different individuals.

Application of forensic post-mortem techniques in a rapid autopsy to facilitate cancer research - an illustrative case report

ABSTRACT Rapid or ‘warm’ autopsy is an emerging technique in cancer genomic research. The expertise of forensic pathology can fulfil the research requirements for rapid autopsy to procure tumour lesions. This includes managing body transportation, interpretation of computed tomography scans, handling fresh (non-formalin fixed tissue), special dissection techniques, documentation, collection of samples, and subsequent reconstruction. This case report documents our experience in a single patient, with over 90 neuroendocrine tumour metastases, from pre-post-mortem planning, procurement, and subsequent tissue analysis. This case highlights the technical parallels between post-mortem examination and a rapid autopsy for cancer tissue collection. We challenge the forensic pathology community to utilize their expertise and expand their roles in rapid autopsy research, so that forensic pathologists can make a significant contribution to future precision medicine.

The relevance of current forensic firearms examination techniques when applied to 3D printed firearms.

This research project had two major objectives. The first was to successfully print and fire the Liberator, a 3D-printed firearm, to assess its feasibility as a lethal weapon. The second objective was to identify any individual characteristics that might be deposited during the firing process by the firearm. The Liberator was printed using unchanged files downloaded from the internet using PLA and ABS filament. The Liberator was fired remotely into newspapers at the Allegheny County Medical Examiner's Office. The printing of the Liberator was both inexpensive and relatively quick with only minor hand modifications made after printing. The Liberator fractured beyond repair after firing but successfully fired and penetrated three newspapers. Neither the bullet nor the cartridge case exhibited any individual characteristics that could be used for identification purposes. Suspected thermoplastic deposits were identified on both the bullet and cartridge case, but additional testing must be done for confirmation purposes. In conclusion, the Liberator can be used reliably for one shot and will not yield any evidence for Firearms and Toolmark Examination.

Bias and fairness in software and automation tools in digital forensics

The proliferation of software tools and automated techniques in digital forensics has brought about some controversies regarding bias and fairness. Different biases exist and have been proven in some civil and criminal cases. In our research, we analyze and discuss these biases present in software tools and automation systems used by law enforcement organizations and in court proceedings. Furthermore, we present real-life cases and scenarios where some of these biases have determined or influenced these cases. We were also able to provide recommendations for reducing bias in software tools, which we hope will be the foundation for a framework that reduces or eliminates bias from software tools used in digital forensics. In conclusion, we anticipate that this research can help increase validation in digital forensics software tools and ensure users' trust in the tools and automation techniques.

Forensic Recovery Techniques on Android Devices with the National Institute of Standards and Technology (NIST) Approach

Dalam era kemajuan teknologi informasi saat ini, penggunaan WhatsApp di Indonesia mencapai angka 88,7% pada kuartal pertama tahun 2022 menurut data Hootsuite We are Social. Meskipun fenomena ini membawa dampak positif, seperti adanya kemudahan dalam komunikasi, namun menimbulkan dampak negatif, terutama dari sisi meningkatnya kejahatan dunia maya. Salah satu contoh kejahatan yang umum terjadi adalah prostitusi online yang dilakukan melalui aplikasi WhatsApp, dimana sebuah pesan, gambar, log, maupun kontak seseorang dapat dengan mudah bertukar tangan tanpa diketahui oleh pihak yang berwajib. Pelaku kejahatan yang memanfaatkan WhatsApp sebagai medianya seringkali menghapus bukti elektronik atas kejahatan yang dilakukannya, menjadikannya tantangan bagi penegak hukum terutama dalam memperoleh bukti atas kejahatan yang dilakukan oleh pelaku. Oleh karena itu, penelitian ini bertujuan untuk mengimplementasikan teknik digital forensic guna mengekstrak berbagai bukti terkait dengan kasus prostitusi online yang memanfaatkan platform WhatsApp. Metode penelitian melibatkan penggunaan alat forensik seperti Mobiledit Forensic dan Oxygen Forensic SQLite Viewer, dengan menerapkan metode National Institute of Standard and Technology (NIST) yang merupakan metode popular dalam forensika digital. Hasil penelitian menunjukkan bahwa penggunaan tools Mobiledit forensic dan Oxygen Forensic SQLite dalam menggali barang bukti digital pada kasus prostitusi online melalui aplikasi Whatsapp dapat menemukan barang bukti dengan nilai akurasi hingga 100% terutama untuk barang bukti dalam bentuk pesan teks, informasi kontak, log panggilan, dan pesan dalam bentuk gambar. Dengan kinerja yang dihasilkan berdasarkan temuan barang bukti tersebut, menunjukkan bahwa kemampuan alat-alat tersebut dalam mendeteksi bukti digital pada smartphone Android yang diharapkan dapat membantu penegak hukum dalam menghadapi tantangan investigasi forensik digital dan memberikan kontribusi positif dalam memberantas kejahatan di dunia maya.

METHODOLOGY OF FORENSIC PREVENTION OF CRIMES AGAINST THE FOUNDATIONS OF NATIONAL SECURITY

Abstract. In the provisions of the scientific article, the authors conduct a scientific study and formulate scientific theoretical provisions in the field of forensic science on the concept of the methodology of forensic prevention of crimes against the foundations of national security, its sources, techniques, special methods, forms and purposes of application of the methodology of forensic prevention of crimes against the foundations of national security. On this basis, the authors propose to fix in the theoretical provisions of the science of forensics such a definition as the methodology of forensic prevention of crimes against the foundations of national security, to form the subject matter of the methodology of forensic prevention of crimes against the foundations of national security, to determine in what aspects the methodology of forensic prevention of crimes against the foundations of national security is considered, its theoretical and practical significance, types, forms, levels, subjects and objects of the methodology of forensic prevention of crimes against the foundations of national security and to characterise the features of forensic prevention of crimes against the foundations of national security. The authors define that the subject of forensic prevention of crimes in general and against national security in particular is scientific provisions and practical recommendations on technical and forensic means, techniques and methods of detecting, recording and investigating criminogenic circumstances, tactical methods and means of their most effective detection and elimination, as well as prevention and suppression of crimes and forensic methods or systems of techniques for detecting and eliminating the causes and conditions of crime, as well as suppression and prevention of crime. As a conclusion, the authors propose to adopt the Law of Ukraine “On Prevention of Criminal Offences”, which would contain general directions, forms, methods of preventive activities in relation to criminal offences, define the range of participants in these activities, their legal status, scope of activity, and criteria for assessing the effectiveness of work. This law will become a procedurally enshrined “tools” for the prevention of crimes in general and crimes against the foundations of national security in particular.

The Impact of Forensic Accounting Techniques in Detecting Financial Fraud "Survey Study of The Opinions of Certified Accountants in Syria"

The purpose of this study was to investigate the impact of forensic accounting techniques used by certified accountants in detecting financial fraud in the companies they audit. The data was collected from primary sources based on a questionnaire distributed to (120) certified accountants who are practicing the profession for the year 2023 and are allowed to audit financial companies in Syria. The results showed a statistically significant impact of the forensic accounting techniques (financial ratio analysis - trend analysis - data mining - critical point audit - relative size theory) used by the certified accountant in detecting financial fraud in Syria. The ability of forensic accounting techniques reached 18.5% in detecting financial fraud according to the opinions of certified accountants in Syria. It also showed a positive and statistically significant effect of the forensic accounting techniques used by the certified accountant in detecting financial fraud in Syria after controlling years of experience. The percentage of explained variance increased from (18.5%) to (25.3%).

The Relevance of Forensic Accounting Techniques in Combating Corrupt Practices in Selected Public Tertiary Institutions in Southwest Nigeria

The Relevance of Forensic Accounting Techniques in Combating Corrupt Practices in Selected Public Tertiary Institutions in Southwest Nigeria

Forensic Accounting Techniques and White-Collar Crime in Nigeria Public Sector

Forensic Accounting Techniques and White-Collar Crime in Nigeria Public Sector

The Importance of DNA Collection from Decedents at Crime Scenes

The criminal justice system encompasses the laws, agencies, and processes involved in solving crimes and imposing penalties of violators. The incorporation of forensic science, with its application of methods to gather and examine evidence, has significantly strengthened the criminal justice system. Advancements in forensic science techniques have enabled more effective prosecution of cases and provided new opportunities to solve previously stagnant cold cases.