Skip to main content

Research Repository

Advanced Search

A Forensic Audit of the Tor Browser Bundle

Muir, Matt; Leimich, Petra; Buchanan, William J.


Matt Muir


The increasing use of encrypted data within file storage and in network communications leaves investigators with many challenges. One of the most challenging is the Tor protocol, as its main focus is to protect the privacy of the user, in both its local footprint within a host and over a network connection. The Tor browser, though, can leave behind digital artefacts which can be used by an investigator. This paper outlines an experimental methodology and provides results for evidence trails which can be used within real-life investigations.


Muir, M., Leimich, P., & Buchanan, W. J. (2019). A Forensic Audit of the Tor Browser Bundle. Digital Investigation, 29, 118-128.

Journal Article Type Article
Acceptance Date Mar 23, 2019
Online Publication Date Mar 30, 2019
Publication Date 2019-06
Deposit Date Apr 8, 2019
Publicly Available Date Mar 31, 2020
Journal Digital Investigation
Print ISSN 1742-2876
Publisher Elsevier
Peer Reviewed Peer Reviewed
Volume 29
Pages 118-128
Keywords Digital forensics, Tor, Windows 10,
Public URL
Publisher URL


You might also like

Downloadable Citations