Analysis of download accelerator plus (DAP) for forensic artefacts

Muhammad Yasin*, Muhammad Arif Wahla, Firdous Kausar

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contribution

9 Citations (Scopus)

Abstract

Download Accelerator Plus (DAP) is one of the most popular download managers [1] due to its free availability, download speed and versatility. This software records download activities across multiple files which include history, registry, RAM, swap and temporary files. This paper analyzes a) the log files (with .DAT extension), b) windows registry entries, and c) RAM and swap files from forensic view point. We also look at tools and techniques for extracting evidence. This research work describes a number of traces left behind after the use of DAP such as install location, download path, downloaded files and menu extensions to name a few, enabling digital investigators to search and interpret download activities. Moreover the study is supported by a tool, DAP Forensic Artefact Colletor (DAPFAC), that assists forensic examiners by providing valuable information which is retrieved from the windows registry and history files on the basis of analysis performed. The widespread use of DAP makes this analysis, an attractive option, ranging from law enforcement agencies to employees monitoring manager.

Original languageEnglish
Title of host publicationIMF 2009 - 5th International Conference on IT Security Incident Management and IT Forensics - Conference Proceedings
Pages142-152
Number of pages11
DOIs
Publication statusPublished - 2009
Externally publishedYes
EventIMF 2009 - 5th International Conference on IT Security Incident Management and IT Forensics - Stuttgart, Germany
Duration: Sep 15 2009Sep 17 2009

Publication series

NameIMF 2009 - 5th International Conference on IT Security Incident Management and IT Forensics - Conference Proceedings

Conference

ConferenceIMF 2009 - 5th International Conference on IT Security Incident Management and IT Forensics
Country/TerritoryGermany
CityStuttgart
Period9/15/099/17/09

ASJC Scopus subject areas

  • Computer Science Applications
  • Information Systems
  • Information Systems and Management

Cite this