A survey of digital forensic investigator decision processes and measurement of decisions based on enhanced preview

摘要

This work focuses on two studies: a survey of digital forensic investigators' investigation and decision processes, and a study of the accuracy of decisions to exclude an exhibit from receiving further in-depth analysis based on an enhanced preview. This study describes the surveyed investigators' generalized investigation process model in terms of the investigators' decisions, including social considerations. It is shown that decision-making based on a less in-depth enhanced preview of exhibits helped to accurately exclude unrelated exhibits before receiving an in-depth analysis while always including exhibits that contained relevant suspect data in child exploitation material investigations.