 |
Once the on-bard storage has been extracted, media files such as photographs taken during the simulated flight can be viewed and examined. These files can provide leads for identification of the owners and whereabouts of the take-off site.
There are a few files and folders that may provide forensic values. Based on the diagram showed, these are the important folders and files to take note. Do note that, data at rest, the data is unencrypted and typical computer forensic techniques can be used to analyze the data.
|
IEEE/ICACT20210119 Slide.16
[Big Slide]