Friend or foe?: How anti-digital forensics vs. digital forensics make or break a case

Abstract

In this day and age, it is difficult to imagine technology not being part of our everyday life. However, such can also hold the power to be used for activities that an average consumer may not partake in. This chapter focuses on anti-digital forensics and digital forensics methods. Hence, it examines detection avoidance strategies and establishes current investigation and prevention methods when a crime is committed with the help of technologies within cyberspace, reaching from device forensics to data hiding. The cases of the San Bernardino shooting, hacktivist group 'Anonymous,' EncroChat, and the Shadowz Brotherhood are discussed, examining how offenders utilise technologies such as encryption and data wiping to try to 'outrun' authorities as well as methods authorities implement to keep up with technological advances to prevent and detect these criminal activities.