Data analysis of file forensic investigation

摘要

Rapidly growing Internet Technology may cause cybercrimes committed by attackers. Different type of digital devices is being used to commit an attack. To detect such a criminal activity forensic investigator has to use various data recovery methods and practical framework. There are various type of forensic tool kit (FTK), freeware software's, techniques and tools are available for file forensic investigation. Decision Tree (DT) is also one of the technique which can help for file forensic investigation purpose. So, system can adopt a way by using Decision Tree for generating, storing and analyzing data retrieved from log files which pose as evidence in file forensic analysis. This paper focuses on how Decision Tree can allow system to quickly, easily and inexpensively analysis of log data available in various file formats for file forensic analysis.