Muhammad Shanawar Javed
Current Organizations / Institutes
The organizations/institutes from the scholar's latest article
Research Subjects
Muhammad Shanawar Javed has a total of 6 co-authors. Here are the top co-authors by number of shared publications:
- Danish Mahmood
Department of Computer Science, SZABIST University, Islamabad, Pakistan
1 shared publication - Khawaja Mansoor
Department of Cyber Security, Air University, Islamabad 44000, Pakistan
1 shared publication - Muhammad Kazim
Industrial & Manufacturing Engineering NDSU Dept North Dakota State University 2485 PO Box 6050 58108-6050 Fargo ND USA
1 shared publication - Syed Muhammad Sajjad
Department of Cyber Security, Air University, Islamabad 44000, Pakistan
1 shared publication - Zafar Iqbal
Department of Cyber Security, National University of Computer & Emerging Sciences, 42000, Islamabad, Pakistan, Pakistan
1 shared publication - Zia Muhammad
Department of Computing, Design, and Communication, University of Jamestown, Jamestown, ND 58405, USA
1 shared publication
Latest Publications
- Open Access
- 19 August 2024
- Published by MDPI AG in Information
- Vol. 15 (8) , 495
Analyzing Tor Browser Artifacts for Enhanced Web Forensics, Anonymity, Cybersecurity, and Privacy in Windows-Based Systems
The Tor browser is widely used for anonymity, providing layered encryption for enhanced privacy. Besides its positive uses, it is also popular among cybercriminals for illegal activities such as trafficking, smuggling, betting, and illicit trade. There is a need for Tor Browser forensics to identify its use in unlawful activities and explore its consequences. This research analyzes artifacts generated by Tor on Windows-based systems. The methodology integrates forensic techniques into incident responses per NIST SP (800-86), exploring areas such as registry, storage, network, and memory using tools like bulk-extractor, autopsy, and regshot. We propose an automated PowerShell script that detects Tor usage and retrieves artifacts with minimal user interaction. Finally, this research performs timeline analysis and artifact correlation for a contextual understanding of event sequences in memory and network domains, ultimately contributing to improved incident response and accountability.
- 19 August 2024
- Published by MDPI AG in Information
- Vol. 15 (8) , 495
Open AccessAnalyzing Tor Browser Artifacts for Enhanced Web Forensics, Anonymity, Cybersecurity, and Privacy in Windows-Based Systems
The Tor browser is widely used for anonymity, providing layered encryption for enhanced privacy. Besides its positive uses, it is also popular among cybercriminals for illegal activities such as trafficking, smuggling, betting, and illicit trade. There is a need for Tor Browser forensics to identify its use in unlawful activities and explore its consequences. This research analyzes artifacts generated by Tor on Windows-based systems. The methodology integrates forensic techniques into incident responses per NIST SP (800-86), exploring areas such as registry, storage, network, and memory using tools like bulk-extractor, autopsy, and regshot. We propose an automated PowerShell script that detects Tor usage and retrieves artifacts with minimal user interaction. Finally, this research performs timeline analysis and artifact correlation for a contextual understanding of event sequences in memory and network domains, ultimately contributing to improved incident response and accountability.