Tiered Forensic Methodology Model for Digital Field Triage by Non-Digital Evidence Specialists

Files in This Item:
File Description SizeFormat 
TieredForensicMethodologyModelForDigitalFieldTriage.pdf646.01 kBAdobe PDFDownload
Title: Tiered Forensic Methodology Model for Digital Field Triage by Non-Digital Evidence Specialists
Authors: Hitchcock, BenLe-Khac, Nhien-AnScanlon, Mark
Permanent link: http://hdl.handle.net/10197/9253
Date: 29-Mar-2016
Online since: 2018-02-22T17:10:01Z
Abstract: Due to budgetary constraints and the high level of training required, digital forensic analysts are in short supply in police forces the world over. This inevitably leads to a prolonged time taken between an investigator sending the digital evidence for analysis and receiving the analytical report back. In an attempt to expedite this procedure, various process models have been created to place the forensic analyst in the field conducting a triage of the digital evidence. By conducting triage in the field, an investigator is able to act upon pertinent information quicker, while waiting on the full report. The work presented as part of this paper focuses on the training of front-line personnel in the field triage process, without the need of a forensic analyst attending the scene. The premise has been successfully implemented within regular/non-digital forensics, i.e., crime scene investigation. In that field, front-line members have been trained in specific tasks to supplement the trained specialists. The concept of front-line members conducting triage of digital evidence in the field is achieved through the development of a new process model providing guidance to these members. To prove the model's viability, an implementation of this new process model is presented and evaluated. The results outlined demonstrate how a tiered response involving digital evidence specialists and non-specialists can better deal with the increasing number of investigations involving digital evidence.
Type of material: Journal Article
Publisher: Elsevier
Journal: Digital Investigation
Volume: 16
Issue: S1
Start page: 75
End page: 85
Copyright (published version): 2016 the Authors
Keywords: Digital field triageForensic first responderNon-specialist investigation
DOI: 10.1016/j.diin.2016.01.010
Language: en
Status of Item: Peer reviewed
Appears in Collections:Computer Science Research Collection

Show full item record

Citations 20

Last Week
Last month
checked on Oct 11, 2019


checked on May 25, 2018

Google ScholarTM



This item is available under the Attribution-NonCommercial-NoDerivs 3.0 Ireland. No item may be reproduced for commercial purposes. For other possible restrictions on use please refer to the publisher's URL where this is made available, or to notes contained in the item itself. Other terms may apply.