Abstract:
The rapid increase of ICT creates new attack
surfaces for cybercrime forensics. In society,
information is the new challenge for security, privacy,
and cybercrime. In this paper, an applicable
framework has been proposed for cybercrime
forensics investigation in Myanmar, known as
CCFIM. By using standard cyber laws and policy for
cybercrime forensics investigation can provide an
ethical, secure and monitored computing
environment. This framework provides a secure
analysis on both logical and physical data
extractions. Acceptable Evidences can be obtained by
examining sensible clues from any digital devices
such as computer, mobile smart phones, tablets, GPS
and IoT devices via traditional or cloud. The most
important part of forensic investigation is to gather
the “relevant” and “acceptable” information for
cyber evidence on court. Therefore, forensic
investigators need to emphasize how file system
timestamps work. This paper emphasizes on the
comparative timestamps of the various file and
window operating systems.