A copy of this work was available on the public web and has been preserved in the Wayback Machine. The capture dates from 2021; you can also visit the original URL.
The file type is
An Empirical Study of the NTFS Cluster Allocation Behavior Over Time
Forensic Science International: Digital Investigation
The amount of data to be handled in digital forensic investigations is continuously increasing, while the tools and processes used are not developed accordingly. This especially affects the digital forensic subfield of file carving. The use of the structuring of stored data induced by the allocation algorithm to increase the efficiency of the forensic process has been independently suggested by Casey and us. Building on that idea we have set up an experiment to study the allocation algorithm ofdoi:10.1016/j.fsidi.2020.301008 fatcat:umveyoeb7zfmzib4eqzbnu3hqi