TY - JOUR
T1 - A Forensic Examination of Online Search Facility URL Record Structures
AU - Horsman, Graeme
PY - 2018/5/29
Y1 - 2018/5/29
N2 - The use of search engines and associated search functions to locate content online is now common practice. As a result, a forensic examination of a suspect's online search activity can be a critical aspect in establishing whether an offense has been committed in many investigations. This article offers an analysis of online search URL structures to support law enforcement and associated digital forensics practitioners interpret acts of online searching during an investigation. Google, Bing, Yahoo!, and DuckDuckGo searching functions are examined, and key URL attribute structures and metadata have been documented. In addition, an overview of social media searching covering Twitter, Facebook, Instagram, and YouTube is offered. Results show the ability to extract embedded metadata from search engine URLs which can establish online searching behaviors and the timing of searches.
AB - The use of search engines and associated search functions to locate content online is now common practice. As a result, a forensic examination of a suspect's online search activity can be a critical aspect in establishing whether an offense has been committed in many investigations. This article offers an analysis of online search URL structures to support law enforcement and associated digital forensics practitioners interpret acts of online searching during an investigation. Google, Bing, Yahoo!, and DuckDuckGo searching functions are examined, and key URL attribute structures and metadata have been documented. In addition, an overview of social media searching covering Twitter, Facebook, Instagram, and YouTube is offered. Results show the ability to extract embedded metadata from search engine URLs which can establish online searching behaviors and the timing of searches.
UR - http://www.scopus.com/inward/record.url?scp=85047663153&partnerID=8YFLogxK
U2 - 10.1111/1556-4029.13818
DO - 10.1111/1556-4029.13818
M3 - Article
AN - SCOPUS:85047663153
SN - 0022-1198
JO - Journal of Forensic Sciences
JF - Journal of Forensic Sciences
ER -