作者: Graeme Horsman
DOI: 10.1016/J.FSIR.2019.100035
关键词:
摘要: Abstract Despite potential numerous benefits, the field-wide sharing of knowledge in digital forensics is arguably still yet to be attained. Achieving this has attracted much practitioner and academic debate, solutions two fundamental hurdles have addressed; ‘how do we share knowledge’, ‘what share’. Currently there a few viable protocols place which tackle either these issues forming barrier sharing. The focus work address latter issue guide practitioners on what content must shared for any data value fellow professionals. This paper proposes Capsule Digital Evidence (CODE), framework designed set out required elements reliable forensic knowledge. CODE structure its requisite contents are examined along with applicability supporting forensics.