Forensic Investigation of Data Storage Systems

Legal investigation of digital data storage systems involves the application of specific methods and procedures that assures quick retrieval of relevant information as well as veracity and security of collected data. This paper aims to explore the potential and benefits of using artificial intelligence (AI) technology in the field of computer investigation. Using a series of specific techniques, computer system investigators can enhance their efficiency in analyzing and identifying evidence. Automatic classification of data present on a storage device can increase the accuracy and reduce the effort of a human investigator. Forensic analysis of a storage device requires integration of a sequence of steps beginning with the (re)construction of the storage device’s image till the semantic interpretation of the content. The paper proposes a processing sequence that includes some AI methods for relevant data search and classification.