Intermediate Data Forensics Workflow for Concurrent Copy and Extraction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data analysis methods are inefficient and time-consuming, particularly when analyzing data for forensic purposes, as they often require copying data to a destination device for analysis, which can be cumbersome and time-intensive.
Innovation Solution
A method and system that utilize an intermediate computing device to assess a source memory device, concurrently copying data to a destination device while monitoring and extracting files of interest from the intermediate device, allowing for simultaneous analysis and archiving.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If data is copied to a destination device for analysis, then data can be analyzed for forensic purposes, but the process becomes time-consuming and inefficient
Solution Approach 1:
The patent introduces an intermediate computing device as a mediator between the source memory device and the destination memory device. This intermediate device enables real-time monitoring and extraction of files of interest during the copying process, allowing forensic analysis to occur concurrently with data archiving rather than sequentially, thereby reducing total analysis time while maintaining forensic capability
Solution Approach 2:
The system performs preliminary assessment of the source memory device structure before complete data copying begins. By pre-identifying potential files of interest and monitoring partition structures in advance, the system can extract relevant forensic data more quickly once copying starts, reducing the overall time required for forensic analysis
2Productivity
If data is copied to an intermediate device for monitoring and extraction, then files of interest can be identified and extracted, but the system complexity increases
Solution Approach 1:
The intermediate computing device is designed to perform multiple functions: it monitors the copying process, assesses partition structures, identifies files of interest, extracts selected files, and archives complete data. By consolidating these functions into a single multi-functional device rather than requiring separate specialized systems for each task, the patent improves productivity while limiting the increase in overall system complexity
Data Source
AI summary
A data analysis method includes assessing a source memory device by an intermediate computing device, copying data from the source memory device to a destination memory device, copying data from the source memory device to the intermediate computing device, monitoring the copying of the data to the intermediate device to determine if partitions can be read, based on if the partitions can be read, monitoring the copying of the data to the intermediate device to determine if an end of a file can be read and based on if the end of a file can be read, extracting files of interest from the data copied onto the intermediate device.