The Development of a Digital Forensic Framework for Ease of Forensic Analysis

The Development of a Digital Forensic Framework for Ease of Forensic Analysis

연구 분야: Analysis

학회: 2024 12th International Symposium on Digital Forensics and Security (ISDFS)

With the growing use of digital devices and technologies, the volume of digital forensic evidence in need of analysis also increases. This results in a need for more effective methods to conduct analysis of this evidence in an investigation. This paper discusses the development of a framework for digital forensic processes. The framework will utilize various tools and techniques to enhance the process of collecting, analyzing, and preserving digital evidence. A survey of existing digital forensic tools, including FTK Imager, Autopsy, and The Sleuth Kit was conducted to help identify various pain points faced by investigators throughout the forensic lifecycle. Based on this study, a framework for the analysis of storage data and memory dumps in digital forensics is proposed, incorporating industry best practices and tools such as The Sleuth Kit and Volatility, enhancing ease of use, and thereby promoting more accurate resolutions.