# Towards a Comprehensive Metaverse Forensic Framework Based on Technology Task Fit Model
### Related Works and Theoretical Underpinning
#### 1.2.4 Metaverse Framework  
The fast-developing metaverse, which is gaining popularity among consumers and companies, also raises the possibility of criminal activity. In response, researchers developed a customized digital forensic investigation framework with four primary phases based on the National Institute of Standards and Technology (NIST) standard [22], which provides a widely used digital forensics framework. This framework is divided into four phases: data collection, evidence assessment and retrieval, analysis, and reporting. It is intended to be used as a guide for performing digital forensic investigations [3]. The framework is relevant to a variety of domains, including the metaverse, and assists investigators in successfully planning and executing their investigations. The data collection phase begins with the systematic gathering of relevant data from the metaverse and the actual world, which are carefully organized into the user domain, service domain, and metaverse platform domain. Following that is the examination and retrieval of evidence phase, in which investigators thoroughly examine and retrieve evidence, ensuring its proper preservation across all relevant domains. Following that, in the analysis phase, investigators look extensively into the gathered information, seeking insights and patterns to better understand the nature of the problem and identify the responsible parties. Finally, the reporting phase concludes with the production of a thorough investigation report, which combines data and evidence, facilitates contact with stakeholders, and lays out the basis for any legal proceedings. \begin{table}
\begin{tabular}{l l l} \hline \hline
**Feature** & **ISO 27037** & **ISO 27043** \\ \hline Focus & Collection and preservation of digital evidence & Investigation of digital incidents: integrating the pre-incident component \\ \hline Audience & Organizations that need to collect and preserve digital evidence for legal or investigative purposes & Organizations that need to investigate and respond to digital incidents \\ \hline \multirow{2}{*}{Scope} & Provides guidelines for the identification, collection, acquisition, and preservation of digital evidence & Provides guidelines for the investigation of digital incidents, including planning, preparation, response, and recovery \\ \hline \hline \end{tabular}
\end{table} 
Table 3: Comparison between ISO/IEC 27043 and 27037. These four phases are supplemented by three essential domains: the user domain, which focuses on user actions and interactions with technologies such as XR and sensors; the service domain, which includes various metaverse services such as e-commerce and cryptocurrency; and the metaverse platform domain, which is in charge of metaverse operation and management using technologies such as blockchain and AI [3]. This comprehensive approach solves the particular issues of digital forensic investigations in the complex metaverse environment, guaranteeing effective evidence collection and analysis while protecting data integrity and security. This rigorous investigational division across stages and domains solves the particular obstacles of digital forensic investigations inside the metaverse, enabling compelling evidence collecting and processing. However, the lack of forensic readiness and the inability to ensure the forensic soundness of the investigator's process presents a major limitation of the study. Another framework was proposed by [23] to retrieve forensically significant data from IoT systems based on service interconnectivity. It proposes a service-interconnectivity-based forensic framework, identifies relevant forensic evidence, and introduces a proof-of-concept application for visualizing interconnectivity. The goal of the document is to improve knowledge and examination of linked IoT ecosystems through a thorough forensic approach. It also covers IoT services and talks about research on intelligent gadgets.