Part 2: The Phase-oriented Advice and Review Structure (PARS) for digital forensic investigations

eDiscovery in digital forensic investigations

Concept Mapping for Digital Forensic Investigations

Research in digital forensics has yet to focus on modeling case domain information involved in investigations. This paper shows how concept mapping can be used to create an excellent alternative to the popular checklist approach used in digital forensic investigations. Concept mapping offers several benefits, including creating replicable, reusable techniques, simplifying and guiding the invest...

Reproducibility of Digital Evidence in Forensic Investigations

We present a three-component model of a digital investigation which comprises: determination of input-output layers, assignment of read and write operations associated with use of forensic tools, and time-stamping of read and write operations. This builds on work of several authors, culminating in the new model presented here which is generic, scalable and compatible with all functions in the s...

Challenges with Automation in Digital Forensic Investigations

The use of automation in digital forensic investigations is not only a technological issue, but also has political and social implications. This work discusses some challenges with the implementation and acceptance of automation in digital forensic investigation, and possible implications for current digital forensic investigators. Current attitudes towards the use of automation in digital fore...

Triage template pipelines in digital forensic investigations

This paper addresses the increasing resources overload being experienced by law enforcement digital forensics units with the proposal to introduce triage template pipelines into the investigative process, enabling devices and the data they contain to be examined according to a number of prioritised criteria. a 2013 Elsevier Ltd. All rights reserved.