# Towards a Comprehensive Metaverse Forensic Framework Based on Technology Task Fit Model
### Related Works and Theoretical Underpinning
#### 1.2.3 The Role of ISO Standards in Network Investigation  
Network incidents, ranging from data breaches to cyber attacks, pose a significant threat to organizations and individuals. To effectively respond to these threats, the research systematically highlights the essential role of investigative techniques [13]. Such practices can detect malicious activity, attribute attacks, and close security vulnerabilities. However, these investigations are not without difficulties. One of the main problems is the lack of standardization and consistency [14]. Each analysis is unique, making it difficult to establish consistent procedures and protocols. This variability can complicate the reliability of forensic findings and the admissibility of evidence in court proceedings. Moreover, the authors in [15] strongly emphasize the importance of creating standards for the metaverse to make its technology better. Led by the Khronos Group, the Metaverse Standards Forum, which includes big companies like Google and Meta, is working on making rules for important technical things like 3D objects, how users interact, and the standards for augmented and virtual reality. Because metaverse technology is quite complex, it is important to coordinate and work together, and having standards is key to making sure everything works well and smoothly for users on different platforms. Prioritizing open standards is crucial to preventing fragmentation. Furthermore, to meet these challenges, international standards have been developed to guide investigators. The International Organization for Standardization (ISO) has introduced ISO/IEC 27037, a standard specifically designed to facilitate the collection and preservation of digital evidence [16] ISO standards provide a structured framework that increases the credibility of forensic findings [17]. They help ensure that investigations comply with established best practices and methods. \begin{table}
\begin{tabular}{p{85.4 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Crime Type** & **Description** & **Exploitation** & **Suggested Research Direction** \\ \hline Virtual Property Theft & Unauthorized acquisition of digital assets. & Security vulnerabilities, trust. & Blockchain technology, security. \\ \hline Cyberbullying & Harassment in VR spaces & Anonymity, lack of moderation. & Content moderation, user education. \\ \hline Phishing & Attempts to scan individuals into stealing their credentials and other information. & Human nature, Lack of security of controls. & Training and awareness of users, Implementation of rigorous controls (two-factor authentication) \\ \hline Money laundering & Making illegally obtained money appear legitimate by disguising its true origin. & Anonymity and lack of regulation in the metaverse. & Metaverse service providers should implement detection systems for suspicious transactions. \\ \hline \hline \end{tabular}
\end{table} 
Table 2: Summary of cybercrimes. The ISO standards in the area of network investigations serve as a model for consistency and reliability. In particular, ISO/IEC 27037 [4] provides investigators with a roadmap for the standardized conduct of forensic investigations. By adhering to these standards, investigators can ensure the credibility of their findings and the admissibility of evidence in court proceedings. These standards define best practices for collecting, protecting, and analyzing evidence. They highlight the importance of maintaining the integrity and authenticity of digital evidence, an essential aspect of any forensic investigation. ISO standards help bridge the gap between the ever-changing cyber threat landscape and the need for consistent investigative procedures. However, the adoption of ISO standards in network forensic investigations is not without complexities and challenges [18] Although these standards offer many benefits, researchers must overcome potential obstacles, including resource limitations and the need for specialized training.