3 papers
cs.CR2025
Exploring the Potential of Large Language Models for Improving Digital Forensic Investigation Efficiency
Akila Wickramasekara, Frank Breitinger, Mark Scanlon
The ever-increasing workload of digital forensic labs raises concerns about law enforcement's ability to conduct both cyber-related and non-cyber-related investigations promptly. C…
cs.CR2024
Strategies and Challenges of Timestamp Tampering for Improved Digital Forensic Event Reconstruction (extended version)
Céline Vanini, Jan Gruber, Christopher Hargreaves +3
Timestamps play a pivotal role in digital forensic event reconstruction, but due to their non-essential nature, tampering or manipulation of timestamps is possible by users in mult…
cs.CR2024
Evaluating tamper resistance of digital forensic artifacts during event reconstruction
Céline Vanini, Chris Hargreaves, Frank Breitinger
Event reconstruction is a fundamental part of the digital forensic process, helping to answer key questions like who, what, when, and how. A common way of accomplishing that is to…