Improving the Efficacy of Digital Forensics
Imani Palmer, University of Illinois at Urbana-Champaign
The digital forensics investigative process involves the collection, preservation, and analysis of electronic data. The analysis of evidence is largely reliant on the knowledge of each examiner and their specific examination process. This data is key to ascertaining a likelihood of an occurrence of events. The assigning of this likelihood requires a reasoning about digital evidence. The digital forensic investigative process is in need of a more reliable method to produce calculated conclusions from digital evidence. This paper aims to further aid examiners on interpreting complex, low-level data with reliable scientific methods in order to abstract human behaviors.