Authors: Nicole Beebe, Ph.D. (UTSA), Jan Clark (UTSA)
DFRWS USA 2004
Abstract
Although digital forensics investigations can vary drastically in their level of complexity, each investigative process must follow a rigorous path. Previously proposed frameworks are predominantly single-tier, higher order process models, focusing on the abstract, rather than more concrete principles of the investigation. We contend that these frameworks, although useful in explaining overarching concepts, require additional detail in order to be useful to investigators and researchers. We therefore propose a multi-tier, hierarchical framework to guide digital investigations. Our framework includes objectivesbased sub-phases that are applicable to various layers of abstraction.