The Development of a Digital Forensic Framework for Ease of Forensic Analysis

With the growing use of digital devices and technologies, the volume of digital forensic evidence in need of analysis also increases. This results in a need for more effective methods to conduct analysis of this evidence in an investigation. This paper discusses the development of a framework for digital forensic processes. The framework will utilize various tools and techniques to enhance the process of collecting, analyzing, and preserving digital evidence. A survey of existing digital forensic tools, including FTK Imager, Autopsy, and The Sleuth Kit was conducted to help identify various pain points faced by investigators throughout the forensic lifecycle. Based on this study, a framework for the analysis of storage data and memory dumps in digital forensics is proposed, incorporating industry best practices and tools such as The Sleuth Kit and Volatility, enhancing ease of use, and thereby promoting more accurate resolutions.