Digital Media Sector Hashing for Evidence Correlation

CINA has developed a prototype to serve found hard drives, phones and other devices for evidence much more quickly than previously possible, as well as detecting fragments of files that have been deleted.

The prototype will reduce the time spent on locating digital evidence and determine the probability that a deleted piece of evidence was present on a device.

Research Areas:

• Criminal investigative processes
• Digital evidence
• Digital forensics
• Forensics