Digital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence. This book describes research results and applications in the discipline of digital forensics. It also highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations.

Digital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence. Networked computing, wireless communications and portable electronic devices have expanded the role of digital forensics beyond traditional computer crime investigations. Practically every crime now involves some aspect of digital evidence; digital forensics provides the techniques and tools to articulate this evidence. Digital forensics also has myriad intelligence applications. Furthermore, it has a vital role in information assurance - investigations of security breaches yield valuable information that can be used to design more secure systems. "Advances in Digital Forensics II" describes original research results and innovative applications in the emerging discipline of digital forensics. In addition, it highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations.

Some Challenges in Digital Forensics.- File System Support for Digital Evidence Bags.- Applying Machine Trust Models to Forensic Investigations.- Exploring Big Haystacks: Data Mining and Knowledge Management.- Countering Hostile Forensic Techniques.- Collusion Detection Using Multimedia Fingerprints.- Linking Individuals to Digital Information.- Mac OS X Forensics.- Assessing Trace Evidence Left by Secure Deletion Programs.- Active Traffic Capture for Network Forensics.- Analysis of Web Proxy Logs.- An Architechture for SCADA Network Forensics.- Forensic Analysis of BIOS Chips.- Process Flow Diagrams for Training and Operations.- Criminal Regulation of Anti-Forensic Tools in Japan.