Distinct Sector Hashes for Target File Detection
Joel Young, Kristina Foster, Simson Garfinkel, Kevin D. Fairbanks · Computer · 2012
Using an alternative approach to traditional file hashing, digital forensic investigators can hash individually sampled subject drives on sector boundaries and then check these hashes against a prebuilt database, making it possible to process raw media without reference to the underlying file system.