SLAMorris Final Thesis After Corrections.pdf - Cranfield University

LIST OF FIGURES
Figure 1-1:A breakdown of the proposed methodology for this research ........... 4
Figure 5-1: Ubuntu 10.10 and the Nautilus File Manager ................................. 66
Figure 5-2: Directory structure for experimental test files ................................. 68
Figure 5-3: The structure of thumbnail caches in Ubuntu and Kubuntu ............ 69
Figure 5-4: A figure showing the thumbnail cache subrecords which make up
the complete record for the file z2nxaujt.jpg .............................................. 70
Figure 5-5: The directory 'Downloads' being viewed in the file browser within
Kubuntu ..................................................................................................... 85
Figure 6-1: Directory structure for experiment test files .................................. 110
Figure 6-2: The centralised thumbnail cache structure ................................... 114
Figure 6-3: Thumbcache_idx record structure ................................................ 115
Figure 6-4: Subrecord header ........................................................................ 117
Figure 6-5: The creation of subrecords in thumbcache_1024.db ................... 124
Figure 6-6: Introduction of a save thumbnail option ........................................ 125
Figure 6-7: The relationship between a file and a record in the thumbnail cache
................................................................................................................ 128
Figure 6-8: A screenshot from a test to see if records were created for files
which had not been viewed ..................................................................... 129
Figure 6-9:Searching for a GUID .................................................................... 137
Figure 6-10: Identifying the Default Icon ......................................................... 138
Figure 6-11: An example contents from an imageres.dll ................................ 139
Figure 6-12: A Shortcut Icon in Windows Explorer ......................................... 139
Figure 6-13: Restore points for the directory Explorer .................................... 146
Figure 6-14: Audio Thumbnails ...................................................................... 149
Figure 6-15: The use of audio thumbnails ...................................................... 149
Figure 6-16: The structure of a media thumbnail ............................................ 150
Figure 6-17: The use of media thumbnails ..................................................... 151
Figure 7-1: Traditional file carving from clusters of unallocated space on the
storage media ......................................................................................... 159
Figure 7-2: Classifications for thumbcache_IDX fragments ............................ 178
xi