AI-Driven Prioritization and Filtering of Windows Artifacts for Enhanced Digital Forensics
Source abstract
Abstract
Digital forensics aims to uncover evidence of cybercrimes within compromised systems. These cybercrimes are often perpetrated through the deployment of malware, which inevitably leaves discernible traces within the compromise... | Find, read and cite all the research you need on Tech Science Press
Source: openalex_inverted_index · Quality: baseline
Research context
OpenAlex topics: Digital and Cyber Forensics · Advanced Malware Detection Techniques · Digital Media Forensic Detection
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
References (50)
Show source-provided references
1. Sonicwall, “Sonicwall cyber threat report (navigating the relentless surge in cybercrime),” 2024. Accessed: Feb. 1, 2024. [Online]. Available: https://www.sonicwall.com/medialibrary/en/white-paper/2024-cyber-threat-report.pdf
2. Elastic security lab, ``Elastic global threat report,' 2023. Accessed: Nov. 1, 2023. [Online]. Available: https://www.elastic.co/pdf/elastic-global-threat-report-october-2023.pdf
3. Statcounter, “Desktop operating system market share world,” 2024. Accessed: Feb. 1, 2024. [Online]. Available: https://gs.statcounter.com/os-market-share/desktop/worldwide
4. Digital forensics research: The next 10 years10.1016/j.diin.2010.05.009 ↗
5. CuFA: A more formal definition for digital forensic artifacts10.1016/j.diin.2016.04.005 ↗
6. Forensic artifacts of microsoft windows vista system
7. J. Garcia, “Detecting the solarwinds malicious scheduled task with an autoencoder,” Accessed: Mar. 16, 2022. [Online]. Available: https://www.ds4n6.io/blog.html
8. AutoLog: Anomaly detection by deep autoencoding of system logs10.1016/j.eswa.2021.116263 ↗
9. A malware detection approach using autoencoder in deep learning10.1109/ACCESS.2022.3155695 ↗
10. Autoencoder-based network anomaly detection
11. Auto-encoder based data clustering
12. Anomaly detection with robust deep autoencoders
13. Semisupervised autoencoder for sentiment analysis
14. Contextual filtering and prioritization of computer application logs for security situational awareness10.1016/j.future.2019.09.005 ↗
15. Anomaly detection: A survey10.1145/1541880.1541882 ↗
16. Mining intrusion detection alarms for actionable knowledge
17. Comprehensive approach to intrusion detection alert correlation10.1109/TDSC.2004.21 ↗
18. Using adaptive alert classification to reduce false positives in intrusion detection
19. False positives reduction via intrusion alert quality framework
20. Reducing false positives in intrusion detection systems10.1016/j.cose.2009.07.008 ↗
21. Automated root cause identification of security alerts: Evaluation in a saas cloud10.1016/j.future.2015.09.009 ↗
22. An unsupervised framework for detecting anomalous messages from syslog log files
23. A mission-impact-based approach to infosec alarm correlation
24. Optimal ids sensor placement and alert prioritization using attack graphs10.1007/s10922-008-9109-x ↗
25. Prioritizing intrusion analysis using dempster-shafer theory
26. Shafer · A mathematical theory of evidence · 197610.1515/9780691214696 ↗
27. Risk assessment and alert prioritization for intrusion detection systems
28. Made: Security analytics for enterprise threat detection
29. Random forests10.1023/A:1010933404324 ↗
30. Detecting adversary using windows digital artifacts
31. ChatGPT for digital forensic investigation: The good, the bad, and the unknown
32. Real-time detection and identification of suspects in forensic imagery using advanced YOLOv8 object recognition models10.18280/ts.400521 ↗
33. Comprehensive study of cloud forensics10.1007/s11831-021-09575-w ↗
34. On feature normalization and data augmentation
35. Batch normalization: Accelerating deep network training by reducing internal covariate shift
36. Weight normalization: A simple reparameterization to accelerate training of deep neural networks
37. Auto-encoder based dimensionality reduction10.1016/j.neucom.2015.08.104 ↗
38. R. Chalapathy and S. Chawla, “Deep learning for anomaly detection: A survey,” 2019, arXiv:1901.03407.10.1145/3394486.3406704 ↗
39. A survey of network anomaly detection techniques10.1016/j.jnca.2015.11.016 ↗
40. Isolation-based anomaly detection10.1145/2133360.2133363 ↗
41. Entropy-based denial-of-service attack detection in cloud data center10.1002/cpe.3590 ↗
42. Traceback of DDoS attacks using entropy variations10.1109/TPDS.2010.97 ↗
43. Scalable command and control detection in log data through UF-ICF analysis
44. Virustotal, “Analyse suspicious files, domains, IPs and URLs to detect malware and other breaches, automatically share them with the security community,” 2022. Accessed: Jun. 23, 2022. [Online]. Available: https://www.virustotal.com/
45. VirusShare, “A repository of malware samples to provide security researchers, incident responders, forensic analysts, and the morbidly curious access to samples of live malicious code,” 2022. Accessed: Jun. 23, 2022. [Online]. Available: https://virusshare.com/
46. KISA, “Korea internet & security agency,” 2021. Accessed: May 15, 2021. [Online]. Available: https://www.kisa.or.kr/
47. Anyrun, “Interactive malware hunting service,” 2023. Accessed: Mar. 15, 2023. [Online]. Available: https://any.run/
48. Autoencoders and their applications in machine learning: A survey10.1007/s10462-023-10662-6 ↗
49. On characterization of entropy measure using logarithmic regression model for Copper (II) Fluoride10.1371/journal.pone.0300757 ↗
50. On analysis of entropy measure via logarithmic regression model for 2D-honeycomb networks10.1140/epjp/s13360-023-04547-4 ↗