A Forensic Audit of the Tor Browser Bundle. (June 2019)

• Record Type: Journal Article
• Authors: Muir, Matt; Leimich, Petra; Buchanan, William J.
• Is Part Of: Digital investigation. Volume 29(2019)
• Page Start: 118
• Page End: 128
• Publication Date: 2019-06
• Subjects: Digital forensics -- Tor -- Windows 10; Forensic sciences -- Data processing -- Periodicals; Criminal investigation -- Data processing -- Periodicals; 363.250285
• DOI: 10.1016/j.diin.2019.03.009
• Languages: English
• ISSNs: 1742-2876

Abstract

Abstract: The increasing use of encrypted data within file storage and in network communications leaves investigators with many challenges. One of the most challenging is the Tor protocol, as its main focus is to protect the privacy of the user, in both its local footprint within a host and over a network connection. The Tor browser, though, can leave behind digital artefacts which can be used by an investigator. This paper outlines an experimental methodology and provides results for evidence trails which can be used within real-life investigations.