Decoding the Hexadecimal Representation of a PostgreSQL Database Table
Primary Investigator:
Research Independant
Joseph Balazs, Dr. Marcus Rogers, Dr. John Springer, Dr. Dawn Laux
Abstract
Database forensics is an inadequately researched subfield of Digital Forensics. Existing documentation and literature contains a gap for the meaning of the hexadecimal representation of records within a table for the PostGreSQL database management system. In order to determine the indications between active and inactive records, the meanings had to be resolved. Simple testing was done on a table to insert, update, and delete records. A hex interpreter was used to analyze the differences between the records at the file system layer.