ThumbScan: A lightweight thumbnail search tool

Show full item record

Title: ThumbScan: A lightweight thumbnail search tool
Author: Elinski, Joseph
Abstract: Since the introduction of Windows 95B, Microsoft users have been able to select a thumbnail view of any system folder. This option prompts the operating system to create a miniature preview of each file. By default, these generated images are archived to a local thumbnail database for quick system retrieval. Once an image is placed in the database, it will never be removed. By viewing the contents of thumbnail databases, a forensic investigator can easily examine the past and present media of a given system. Though this cache is not a perfect record, it is a good indicator of media storage locations and habits. For these reasons, we present ThumbScan, an automated search tool for locating and analyzing the archived thumbnails of modern Windows systems.
Record URI: http://hdl.handle.net/1850/13297
Date: 2010

Files in this item

Files Size Format View
JElinskiThesis11-18-2010.pdf 458.1Kb PDF View/Open

The following license files are associated with this item:

This item appears in the following Collection(s)

Show full item record

Search RIT DML


Advanced Search

Browse