Abstract
Considering that a triage related task may essentially make-or-break a digital investigation and the fact that a number of triage tools are freely available online but there is currently no mature framework for practically testing and evaluating them, in this paper we put three open source triage tools to the test. In an attempt to identify common issues, strengths and limitations we evaluate them both in terms of efficiency and compliance to published forensic principles. Our results show that due to the increased complexity and wide variety of system configurations, the triage tools should be made more adaptable, either dynamically or manually (depending on the case and context) instead of maintaining a monolithic functionality. © 2013 Elsevier Ltd. All rights reserved.
DOI
10.1016/j.diin.2013.04.002
Publication Date
2013-09-01
Publication Title
Digital Investigation
Volume
10
Issue
2
Publisher
Elsevier BV
ISSN
1742-2876
Embargo Period
2024-11-22
First Page
99
Last Page
115
Recommended Citation
Shiaeles, S., Chryssanthou, A., & Katos, V. (2013) 'On-scene triage open source forensic tool chests: Are they effective?', Digital Investigation, 10(2), pp. 99-115. Elsevier BV: Available at: https://doi.org/10.1016/j.diin.2013.04.002
