A case study on anonymised sharing platforms and digital traces left by their usage. Issue 1 (January 2021)

• Record Type: Journal Article
• Authors: Horsman, Graeme
• Is Part Of: Science & justice. Volume 61:Issue 1(2021)
• Page Start: 97
• Page End: 106
• Publication Date: 2021-01
• Subjects: Digital forensics -- Investigation -- Browser forensics -- Cloud forensics; Forensic sciences -- Periodicals; Criminal investigation -- Periodicals; Forensic Medicine -- Periodicals; Jurisprudence -- Periodicals; Criminalistique -- Périodiques; Enquêtes criminelles -- Périodiques; Criminal investigation; Forensic sciences; Electronic journals; Periodicals; 363.2505
• DOI: 10.1016/j.scijus.2020.09.002
• Languages: English
• ISSNs: 1355-0306

Abstract

Abstract: Non-local forms of file storage and transfer provide investigatory concerns. Whilst mainstream cloud providers offer a well-established challenge to those involved in criminal enquiries, there are also a host of services offering non-account based 'anonymous' online temporary file storage and transfer. From the context of a digital forensic investigation, the practitioner examining a suspect device must detect when such services have been utilised by a user, as offending files may not be resident on local storage media. In addition, identifying the use of a service may also expose networks of illegal file distribution, supporting wider investigations into criminal activity. This work examines 16 anonymous file transfer services and identifies and interprets the digital traces left behind on a device following their use to support law enforcement investigations.