FC-Trace Ext4 Fast-Commit Forensic Dataset
收藏资源简介:
Dataset Description: Synthetic ext4 Fast-Commit Disk Images This dataset contains five synthetic ext4 disk-image snapshots for reproducible research on ext4 fast-commit forensic parsing and event reconstruction. Each image includes operation-level ground truth, measured results, provenance information, generation scripts, and integrity checksums. The scenarios represented are: S1: normal file operations S2: crash-oriented operations S3: anti-forensic cleanup operations S4: short-lived files S5: rename-tree operations All images were generated from controlled ext4 file systems with fast commit enabled and contain no personal, confidential, or proprietary information. FC-Trace processes the evidence images in read-only mode without mounting them. Key Features: Supports reproducible evaluation of ext4 fast-commit forensic analysis Enables comparison of recovered events with known file-system operations Supports analysis of event ordering, path reconstruction, integrity validation, and controlled evidence-loss conditions Provides checksums and provenance records for transparent verification Suitable for authorized academic and laboratory research



