Evaluating Commercial Counter-Forensic Tools

  • Article

This paper reviews the performance of six counter-forensic tools and highlight operational shortfalls that could permit the recovery of significant evidentiary data. In addition, each tool creates a distinct operational fingerprint that an analyst may use to identify the application used and, thus, guide the search for residual data.

https://www.dfrws.org/2005/proceedings/geiger_couterforensics.pdf

Urs