We present a file system monitor, AccountabilityFS, which prepares an organization for forensic analysis and incident investigation in advance by ensuring file system operation traces readily available. We demonstrate the ...

This thesis contributes to the tangible methods to prepare an enterprise for upcoming digital investigation with complete, pertinent, reliable, and privacy preserving evidence. Regarding an information security incident ...