School of Health & Life Sciences, Teesside University, Middlesbrough, North Yorkshire, United Kingdom.
Sci Justice. 2021 Jan;61(1):97-106. doi: 10.1016/j.scijus.2020.09.002. Epub 2020 Sep 9.
Non-local forms of file storage and transfer provide investigatory concerns. Whilst mainstream cloud providers offer a well-established challenge to those involved in criminal enquiries, there are also a host of services offering non-account based 'anonymous' online temporary file storage and transfer. From the context of a digital forensic investigation, the practitioner examining a suspect device must detect when such services have been utilised by a user, as offending files may not be resident on local storage media. In addition, identifying the use of a service may also expose networks of illegal file distribution, supporting wider investigations into criminal activity. This work examines 16 anonymous file transfer services and identifies and interprets the digital traces left behind on a device following their use to support law enforcement investigations.
非本地形式的文件存储和传输引发了调查方面的关注。虽然主流的云服务提供商对参与刑事调查的人员构成了挑战，但也有许多提供非账户式“匿名”在线临时文件存储和传输的服务。从数字取证调查的角度来看，检查可疑设备的从业人员必须检测到用户是否使用了此类服务，因为违规文件可能不在本地存储介质上。此外，识别服务的使用情况也可能暴露非法文件分发网络，从而支持对犯罪活动的更广泛调查。这项工作检查了 16 种匿名文件传输服务，并确定和解释了在使用这些服务支持执法调查后在设备上留下的数字痕迹。
