Abstract: There are no general frameworks with which we may analyze the anti-forensics situation. Solving anti-forensic issues requires that we create a consensus view of the problem itself. This paper attempts to arrive at a standardized method of addressing anti-forensics by defining the term, categorizing the anti-forensics techniques and outlining general guidelines to protect forensic integrity.

  author       = {Ryan Harris},
  url          = {http://www.dfrws.org/2006/proceedings/6-Harris.pdf},
  journal      = {Digital Investigation},
  number       = {Supplement 1},
  volume       = {3},
  year         = {2006},
  title        = {Arriving at an anti-forensics consensus: examining how to define and control the anti-forensics problem},
  pages        = {44--49},