SBA goes Open Science
With respect to open science and reproducibility of scientific results, we are releasing our first public data set today. It is the XML output of fiwalk for 18 versions of Microsoft Windows, and was used to quantify file slack space capacity and stability with regards to system updates in digital forensics. You can find it here (SHA1=526c5b934e3a067d1c61b3f19bbe027b377482b4)
The results and interpretation can be found in the original paper “Quantifying Windows File Slack in Size and Stability”, presented at Ninth Annual IFIP WG 11.9 International Conference on Digital Forensics and to be published in Advances in Digital Forensics IX by Springer sometime later this year. You can find a preprint here.