Authors: Harm Van Beek (Netherlands Forensic Institute)
DFRWS APAC 2022
Abstract
Digital data and deduced digital traces play a continuously growing role in investigations and the furnishing of proof in crime cases. The volume, variety and variation of this data grow rapidly. As a result, there is a serious shortage of digital forensic knowledge and a growing need for new knowledge to handle this growth. Hansken is a Digital Forensics as a Service (DFaaS) platform that has been designed to give access to and insight in digital data and traces originating from seized and demanded material. In recent years, Hansken has been implemented at law enforcement and intelligence agencies in the Netherlands, Norway, Spain and pilots are in progress in various other countries.
The workshop starts with an introduction to the DFaaS concepts, followed by a short demonstration of Hansken. After the introduction a short hands-on part of the workshop starts. Participants are asked to complete a number of simple exercises that involve investigating digital evidence. Next, we explain the Hansken query language and trace model followed by a tutorial explaining the Hansken expert functions. In the final part of the workshop we present future developments and the Hansken community efforts.