遇见数据集

AAPF Validation Dataset: Cross-Page-Size ESE Format Changes in Windows Server 2025

收藏
Zenodo2026-06-22 更新2026-06-28 收录
官方服务:

资源简介:

Companion artifacts for the paper "Silent Evidence Loss in Windows Server 2025: Cross-Page-Size ESE Format Changes and Their Forensic Integrity Implications" (Forensic Science International: Digital Investigation, 2026). Includes: (a) source-level patches for libesedb that resolve a previously unreported family of WS2025 itagState reinterpretation failures spanning 4 KiB, 16 KiB, and 32 KiB pages, resolved by a single format-revision-gated patch (a no-op on all pre-WS2025 databases by construction); (b) a Rust-based NTDS.dit analysis tool (Poneglyph) incorporating the revision-gated patch; (c) 14 ESE database samples (ntds.dit, DataStore.edb, WebCacheV01.dat, SRUDB.dat) captured under the Automated Artifact Population Framework on Windows Server 2019 and Windows Server 2025 across Clean, Crashed, and Locked snapshot states; (d) reproduction scripts and pre-computed expected outputs. See README.md for the full inventory and quick-start instructions, and ETHICAL_USE.md for the intended-use statement.

提供机构:
Zenodo
创建时间:
2026-06-22
二维码
社区交流群
二维码
科研交流群
商业服务