The digital forensic process as traditionally laid out is very time inten- sive - it begins with the collection, duplication and authentication of every piece of digital media prior to examination. Digital triage, a pro- cess that takes place prior to this standard methodology, can be used to speed up the process and provide valuable intelligence without sub- jecting digital evidence to a full examination. This quick intelligence can be used in the field for search and seizure guidance, in the office to determine if media is worth sending out for an examination, or in the laboratory to prioritize cases for analysis. For digital triage to become accepted by the forensic community, it must be modeled, tested and peer reviewed, but there have been very few attempts to model digi- tal triage. This work describes the evaluation of the Semi-Automated Crime-Specific Digital Triage Process Model, and presents the results of five experimental trials.
['Gary L. Cantrell', 'David A. Dampier']
Evaluation of the Semi-automated Crime-Specific Digital Triage Process Model