Related Experiment Video
Updated: May 28, 2026
12:34
Experimental Procedure for Laboratory Studies of In Situ Burning : Flammability and Burning Efficiency of Crude Oil
Published on: May 1, 2018
Artifacts of CD burning in the Microsoft Windows master file table
1Digital Intelligence, New Berlin, WI 53151, USA. delrick@digitalintelligence.com
Journal of Forensic Sciences
|October 11, 2011
Summary
Digital forensic examiners can now detect CD/DVD burning, a previously undetectable file copying method. New evidence markers in the New Technology File System (NTFS) reveal data theft, aiding investigations.
Area of Science:
- Digital Forensics
- Computer Science
- Information Security
Background:
- Digital theft is challenging to detect as exact copies can be made without altering the original file.
- CD/DVD burning has been considered an undetectable method for copying digital files.
- Detecting file exfiltration is a significant challenge for digital forensic examiners.
Purpose of the Study:
- To investigate the detectability of CD/DVD burning as a file copying method.
- To identify potential forensic artifacts left by the CD burning process.
- To enhance the capabilities of digital forensic examiners in detecting data theft.
Main Methods:
- Examined the CD/DVD burning process.
- Analyzed the New Technology File System (NTFS) for residual evidence.
- Investigated artifacts within the Master File Table (MFT) across various Windows versions.
Main Results:
- Identified specific artifacts within the NTFS Master File Table associated with CD/DVD burning.
- Demonstrated that the CD burning process leaves detectable markers.
- Found evidence that was previously considered overlooked.
Conclusions:
- CD/DVD burning is now a detectable method for digital forensic analysis.
- The identified NTFS artifacts provide new avenues for detecting data exfiltration.
- This research enhances digital forensic capabilities in uncovering file copying incidents.
Related Concept Videos
01:22Burn Injuries
Burn injuries occur when the skin and underlying tissues are damaged due to exposure to heat, electricity, chemicals, radiation, or friction. They can vary in severity, from minor superficial burns to severe deep burns that can be life-threatening.
The damage results in the death of skin cells, which can lead to a massive loss of fluid. Dehydration, electrolyte imbalance, and renal and circulatory failure follow, which can be fatal. Burn patients are treated with intravenous fluids to offset...
The damage results in the death of skin cells, which can lead to a massive loss of fluid. Dehydration, electrolyte imbalance, and renal and circulatory failure follow, which can be fatal. Burn patients are treated with intravenous fluids to offset...
02:15M-Cdk Drives Transition Into Mitosis
Checkpoints throughout the cell cycle serve as safeguards and gatekeepers, allowing the cell cycle to progress in favorable conditions and slow or halt it in problematic ones. This regulation is known as the cell cycle control system.
Cyclin-dependent kinases, or Cdks, work in concert with cyclins to control cell cycle transitions. M-Cdk, a complex of Cdk1 bound to M cyclin, is a well-known example of this coordinated control that drives the transition from the G2 to the M phase.
M cyclin...
Cyclin-dependent kinases, or Cdks, work in concert with cyclins to control cell cycle transitions. M-Cdk, a complex of Cdk1 bound to M cyclin, is a well-known example of this coordinated control that drives the transition from the G2 to the M phase.
M cyclin...
02:14Combustion Energy: A Measure of Stability in Alkanes and Cycloalkanes
The low reactivity in alkanes can be attributed to the non-polar nature of C–C and C–H σ bonds. Alkanes, therefore, were initially termed as “paraffins,” derived from the Latin words: parum, meaning “too little,” and affinis, meaning “affinity.”
Alkanes undergo combustion in the presence of excess oxygen and high-temperature conditions to give carbon dioxide and water. A combustion reaction is the energy source in natural gas, liquified petroleum gas (LPG), fuel oil, gasoline, diesel fuel, and...
Alkanes undergo combustion in the presence of excess oxygen and high-temperature conditions to give carbon dioxide and water. A combustion reaction is the energy source in natural gas, liquified petroleum gas (LPG), fuel oil, gasoline, diesel fuel, and...
01:23Methods of Documentation V: CBE
Charting by Exception, or CBE, is a method of documentation used in healthcare, particularly in nursing, that focuses on documenting only significant or abnormal findings rather than recording every detail. This approach aims to streamline the documentation process, improve efficiency, and ensure that healthcare providers can quickly identify deviations from normalcy in patient assessments.
In CBE, healthcare professionals establish predefined standards of practice that define what constitutes...
In CBE, healthcare professionals establish predefined standards of practice that define what constitutes...
02:38S-Cdk Initiates DNA Replication
The cell cycle is a series of events leading to DNA duplication followed by the division of cell content to form two daughter cells. The cell cycle progresses in four stages—the cell increases in size (gap 1 or G1-phase), duplicates its DNA (synthesis or S-phase), prepares to divide (gap 2 or G2-phase), and divides (mitosis or M-phase).
Two states at the origin of replication
In eukaryotes, the initiation of replication occurs at many sites on the chromosomes, called the origins of replication.
Two states at the origin of replication
In eukaryotes, the initiation of replication occurs at many sites on the chromosomes, called the origins of replication.
02:23Master Transcription Regulators
Master transcription regulators are regulatory proteins that are predominantly responsible for regulating the expression of multiple genes. Often these genes work in concert to drive a complex process. Activation of a master transcription regulator can lead to a cascade of transcriptional activation necessary for that outcome. These regulators can directly bind to the regulatory sequences of the various genes involved, or they can indirectly regulate transcription by binding to regulatory...