A case-based reasoning method for locating evidence during digital forensic device triage
Novel approach to digital forensic triage using case-based reasoning. Knowledge of past investigations highlights likely evidential areas on a system. Uses Bayesian inference. A more effective triage method compared to a practitioner using leading tool EnCase.
cbr-ft case-based reasoning forensic triager df digital forensics dt device triage err evidence relevance rating prf primary relevance figure