The Use of Data Mining in Digital Forensics Investigation

Hello All

I'm currently conducting a survey as part of my thesis to identify the current awareness of data mining techniques in the digital forensic field.

It would be much appreciated if those of you who have experience in this area could assist by completing a brief survey. This can be accessed from https://www.surveymonkey.com/r/YJ9YP6B .

Much appreciated and thanks in advance.

O

Maybe it would have been more suited to be posted in
http//www.forensicfocus.com/Forums/viewforum/f=5/

Computer forensics training and education issues. If you are looking for topic suggestions for your project, thesis or dissertation please post here rather than the general discussion forum.

and possibly the scope should be a bit explained and "narrowed" (or "widened").

I mean, if you don't define before what exactly is the definition for "data-mining" techniques, there is the concrete risk that people that use some of those techniques simply don't call them that way or consider them not part of "data-mining".
https://en.wikipedia.org/wiki/Data_mining

The term is a misnomer, because the goal is the extraction of patterns and knowledge from large amount of data, not the extraction of data itself.[5] It also is a buzzword[6] and is frequently applied to any form of large-scale data or information processing (collection, extraction, warehousing, analysis, and statistics) as well as any application of computer decision support system, including artificial intelligence, machine learning, and business intelligence.

jaclaz

Hello

I am currently doing my research on this topic for a case I am working on. It involves 100 TB's of data, how to search this data in an effective way using data mining techniques for digital forensic perspectives. Please PM as I have extensive Journals, pdfs, and others with this topic.

Thanks,

Hello

I am currently doing my research on this topic for a case I am working on. It involves 100 TB's of data, how to search this data in an effective way using data mining techniques for digital forensic perspectives. Please PM as I have extensive Journals, pdfs, and others with this topic.

Thanks,

Well, you may want to index the data somehow, key stuff is what files are where, types of files, meta info, timestamps etc and use say, elastic search to quickly find the results you want - or at least quickly exclude data you do not want.

The data itself, where does it reside? One unit? (i.e. a NAS) many units? Does it have multiple network interfaces? SSD or vanilla drives? If things are set up properly, you could use several machines to do parallel queries against the box(es) its stored in and get a fair amount of speed.

Nice research topic btw.