Comparación de Diferentes Herramientas para el Análisis Forense en Dispositivos Extraíbles de Tipo Flash Drive

Abstract

Currently, information is one of the most important assets that organizations and individuals have in society, for this reason good management of it is transcendental, however in the process carried out in a forensic analysis, they are not very well-known good practices and leaving aside the investigation of such an important factor in computer security.

The forensic analysis can be understood as the process by which different sources of information are acquired used according to the specific need, for this reason it is fundamental to carry out an adequate methodology to carry out the analysis process in the different extractable media analyzed.

Thus, this article describes the process that is carried out in the investigation in order to perform the respective forensic analysis and thus put into practice different concepts applied in the field. Different tools are analyzed that offer the possibility of carrying out different methods of forensic analysis, applied to extractable storage devices, from which various results are obtained, thus making a meaningful comparison highlighting the main peculiarities of the tools used for the analysis, evidencing in this way the strategic points of each of them, indicating which provides a better analysis of the information.

Additionally, the problems that were obtained during the development of the process are described, in order to carry out a procedure that generates the best results and thus be able to carry out an efficient forensic analysis, avoiding the mishandling of the information.