About This Workshop
The use of AI is becoming increasingly commonplace in every field. However, the real use of AI for DF investigations is still at an experimental level, as investigators are often not yet aware how GenAI techniques could benefit their investigations. Prompts are instructions given to a Large Language Model (LLM) that help it understand human requests and produce the best possible results for the human. This workshop is designed to demonstrate the advantages of using prompt engineering techniques such as Instruction Prompting, Model Context Protocol (MCP) based Prompting, and Role and Task-based Prompting with AI agents. Participants will also learn about MCP services and AI agents for DF.
All participants will get hands-on experience solving 4 cases using those prompt techniques, which will serve as an exercise. These exercises were structured in Google Colab notebooks, and users can easily copy them to their own Google Drive and engage with the exercises. The first exercise is a keyword search in which participants will ask three questions about a given fictional case. We ask participants to use their existing knowledge to prompt and find the answers to the given question, and then select the correct answers. At the end of this exercise, we show how to achieve more solid and accurate results for the same case using prompt engineering techniques. Similarly, we will present a case for deleted file recovery and a case for file hashing, and show how accurate results can be achieved through prompt engineering.
As the final task, we will ask participants to conduct a final case investigation similar to the first cases, using the taught techniques and selecting the evidence they found. In conclusion, based on results from 4 cases, we will compare the final results with those from the first 3 cases and demonstrate to the audience how accurate evidence can be obtained using these prompt engineering techniques.
Learning Objectives
At the end of this workshop you will be able to:
- Gain knowledge of prompt engineering for digital forensics
- Create effective prompts to use in AI systems
- Create a simple MCP (Model Context Protocol) service for digital forensics
- Create a simple agenting platform for digital forensics
Requirements
- Google Account
- Download notebooks for Google Colab (links provided before workshop)
- Internet access required during workshop