Date of Award
3-2022
Document Type
Thesis
Degree Name
Master of Science
Department
Department of Electrical and Computer Engineering
First Advisor
Gilbert L. Peterson, PhD
Abstract
One product of a digital forensics examination is a reconstruction of events recorded in the media. A reconstruction places all of the case relevant trace into temporal, identity and associative relationships. Creating this reconstruction is a manual and time consuming process for the examiner. This thesis presents AIER. AIER integrates automation, abstraction and visualization into the Autopsy forensic software to improve the reconstruction process. The integration utilizes a custom Autopsy ingest module to extract and abstract artifact data and an interactive graph-based timeline visualization module. These improvements to the forensic examiner workflow are evaluated through a series of use cases.
AFIT Designator
AFIT-ENG-MS-22-M-048
DTIC Accession Number
AD1166903
Recommended Citation
Montgomery, Ryan P., "Automated Reconstructions for the Digital Forensic Examiner Workflow" (2022). Theses and Dissertations. 5324.
https://scholar.afit.edu/etd/5324