Patent ID: 8707180

Claim:
A non-transitory computer-readable storage medium comprising a set of instructions for executing a cyber investigation to be completed by an investigator on a computer having a processor, a memory, and a display coupled with the computer, the computer-readable medium comprising: instructions to run a wizard application on the computer in response to execution of an executable file for the wizard application located on the computer-readable storage medium; instructions to receive, through the wizard application, a type of activity of a person of interest (POI) under investigation in response to inputs to select the activity type from a list of available activity types within the wizard application; instructions to direct the processor to guide the investigator through capturing data related to the selected activity type through one or more steps presented to the investigator through one or more screens of the wizard application shown in the display; instructions to receive inputs through at least one of the screens to obtain information needed to continue capturing the data related to the selected activity of the POI; and instructions to direct the processor to store the captured data in a removable data storage device or medium for analysis and use in the cyber investigation.