A method of processing digital evidence on a clustered file system

摘要

A system and method of processing digital evidence is disclosed. The method comprises the steps of: (a) constructing a hierarchy of pre-compiled processing modules that specify processing steps; (b) receiving input digital data; (c) processing the digital data using the processing steps to obtain processing results; (d) dynamically modifying the hierarchy and/or execution of the pre-compiled processing modules based on one or more of the input digital data, processing module inputs, and events in a digital evidence processing system performing the method; (e) logging details of use of each processing module; and (f) writing the processing results on a data storage device.