Detailed Information

Cited 0 time in webofscience Cited 0 time in scopus
Metadata Downloads

DiagAnalyzer: User behavior analysis and visualization using Windows Diagnostics logsopen access

Authors
Park, SunghaLee, Sangjin
Issue Date
Sep-2022
Publisher
ELSEVIER SCI LTD
Keywords
Windows Diagnostics; Eventtranscript; db; Windows forensics; Windows 10; Windows 11
Citation
FORENSIC SCIENCE INTERNATIONAL-DIGITAL INVESTIGATION, v.43
Indexed
SCIE
SCOPUS
Journal Title
FORENSIC SCIENCE INTERNATIONAL-DIGITAL INVESTIGATION
Volume
43
URI
https://scholar.korea.ac.kr/handle/2021.sw.korea/146603
DOI
10.1016/j.fsidi.2022.301450
ISSN
2666-2817
Abstract
Windows Diagnostics, which is used by default in Windows 10 and Windows 11, records basic device information as well as various detailed user activities of those who use Windows. Previously, there have been several preceding studies that attempted to apply diagnostics information to digital forensics analysis, but there have been no practical methods or publicly available tools to analyze data in relation to user behavior. Therefore, this paper analyzed how three representative activities (attaching and detaching USB storage devices, web browser activities, and wireless network activities) are recorded in Window Diagnostics. Furthermore, based on the analysis results, we developed DiagAnalyzer, which automatically analyzes the diagnostics event log and visualizes the user's behavior. Through the meth-odology and tool of this paper, the application of Windows Diagnostics deserves further attention as an important artifact in digital forensics investigation for Windows in the future. (c) 2022 The Author(s). Published by Elsevier Ltd on behalf of DFRWS This is an open access article under the CC BY-NC-ND license (http://creativecommons.org/licenses/by-nc-nd/4.0/).
Files in This Item
There are no files associated with this item.
Appears in
Collections
School of Cyber Security > Department of Information Security > 1. Journal Articles

qrcode

Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.

Related Researcher

Researcher LEE, SANG JIN photo

LEE, SANG JIN
Department of Information Security
Read more

Altmetrics

Total Views & Downloads

BROWSE