Journal
DIGITAL INVESTIGATION
Volume 6, Issue -, Pages S78-S87Publisher
ELSEVIER SCI LTD
DOI: 10.1016/j.diin.2009.06.008
Keywords
Computer forensic timeline; Event visualization; E-fraud; Timestamp; Chronological evidence; Time Variable; Time determination
Ask authors/readers for more resources
Computer Forensics is mainly about investigating crime where computers have been involved. There are many tools available to aid the investigator with this task. We have created a prototype of a new type of tool called CyberForensic TimeLab where all evidence is indexed by their time variables and plotted on a timeline. We believed that this way of visualizing the evidence allows the investigators to find coherent evidence faster and more intuitively. We have performed a user test where a group of people has evaluated our prototype tool against a modern commercial computer forensic tool and the results of this preliminary test are very promising. The results show that users completed the task in shorter time, with greater accuracy and with less errors using CyberForensic TimeLab. The subjects also experienced that the prototype were more intuitive to use and that it allowed them to easier locate evidence that was coherent in time. (C) 2009 Digital Forensic Research Workshop. Published by Elsevier Ltd. All rights reserved.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available