Publication Details

Extrakce událostí ze souborových systémů - Návrh a implementace distribuované architektury

BURGET, R.; RYCHLÝ, M. Extrakce událostí ze souborových systémů - Návrh a implementace distribuované architektury. FIT-TR-2020-08, Brno: Fakulta informačních technologií VUT v Brně, 2020. s. 0-0.
English title
Event Extraction from Filesystems - Design and Implementation of a Distributed Architecture
Type
report
Language
Czech
Authors
Burget Radek, doc. Ing., Ph.D. (DIFS)
Rychlý Marek, RNDr., Ph.D. (DIFS)
Keywords

forensic analysis, timeline analysis, Apache Hadoop

Abstract

Extraction of time-stamped events from local file systems is a key step in the reconstruction of the timeline, which tells about the use of the device (computer, USB drive, etc.) in the past. Existing event extraction tools are, without exception, designed to run on a single local computer. Due to the available capacity of current hard disks and other storage devices, the analysis of the included file systems is very time consuming. In this document, we therefore describe the design, implementation and experimental evaluation of a new, distributed solution that allows the event extraction process to be spread over a large number of computing nodes. This makes it possible to increase the efficiency of the whole process and at the same time integrate the obtained results with data from other sources into a common timeline.

Published
2020
Pages
21
Publisher
Fakulta informačních technologií VUT v Brně
Place
FIT-TR-2020-08, Brno
BibTeX 
@techreport{BUT168666,
  author="Radek {Burget} and Marek {Rychlý}",
  title="Extrakce událostí ze souborových systémů - Návrh a implementace distribuované architektury",
  year="2020",
  publisher="Fakulta informačních technologií VUT v Brně",
  address="FIT-TR-2020-08, Brno",
  pages="21",
  url="https://www.fit.vut.cz/research/publication/12303/"
}
Back to top