윈도우 환경에서의 협업 도구 잔디 아티팩트 수집 및 분석 연구

Vol. 34, No. 5, pp. 915-925, 10월. 2024
10.13089/JKIISC.2024.34.5.915, Full Text:
Keywords: Digital Forensics, Cloud Forensics, Collaboration Tool, Jandi
Abstract

As non-face-to-face work increases due to the COVID-19 pandemic, companies have introduced collaboration tools to perform work without spatial constraints. The rapidly growing collaboration tool market continues to show high utilization rates even after the endemic due to the increase in demand for hybrid work that combines face-to-face and non-face-to-face work. The use of collaboration tools increases work efficiency, facilitates smooth collaboration, and increases data integration, generating various data. However, at the same time, it also increases the risk of exposure of corporate confidential information due to the possibility of external access by internal users. In response to this, an analysis method is needed to collect and acquire data during digital investigations targeting collaboration tools. In this paper, we identified local artifacts targeting JANDI, a collaboration tool in a Windows environment, and explained how to collect and analyze data through API reconstruction. Finally, we presented a digital forensic utilization method through scenario and chat room reconstruction.

Statistics
Show / Hide Statistics

Statistics (Cumulative Counts from December 1st, 2017)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.


Cite this article
[IEEE Style]
위다빈, 박명서, 김한결, "A Study on Collection and Analysis of Collaboration Tool JANDI Artifacts in a Windows Environment," Journal of The Korea Institute of Information Security and Cryptology, vol. 34, no. 5, pp. 915-925, 2024. DOI: 10.13089/JKIISC.2024.34.5.915.

[ACM Style]
위다빈, 박명서, and 김한결. 2024. A Study on Collection and Analysis of Collaboration Tool JANDI Artifacts in a Windows Environment. Journal of The Korea Institute of Information Security and Cryptology, 34, 5, (2024), 915-925. DOI: 10.13089/JKIISC.2024.34.5.915.