Arica Kulm – 2021 OSMOSIS Speaker
Previous studies of dark web forensics have focused on network forensics rather than host-based forensics. This session discusses a framework for identifying host-based artifacts during digital forensic investigations involving suspected dark web use. The framework is reusable, comprehensive and easy to follow and will assist investigators in finding artifacts that are designed to be hidden or otherwise hard to find. Attendees can expect to learn steps for determining if a system contains host-based artifacts for either Windows-based artifacts or macOS-based artifacts. In addition, Tails persistent storage artifacts are explored.