Guide to Integrating Forensic Techniques into Incident Response
Open accessAbstract
Reports on Computer Systems TechnologyThe Information Technology Laboratory (ITL) at the National Institute of Standards and Technology (NIST) promotes the U.S. economy and public welfare by providing technical leadership for the nation's measurement and standards infrastructure.ITL develops tests, test methods, reference data, proof of concept implementations, and technical analysis to advance the development and productive use of information technology.ITL's responsibilities include the development of technical, physical, administrative, and management standards and guidelines for the cost-effective security and privacy of sensitive unclassified information in Federal computer systems.This Special Publication 800-series reports on ITL's research, guidance, and outreach efforts in computer security and its collaborative activities with industry, government, and academic organizations.Certain commercial entities, equipment, or materials may be identified in this document in order to describe an experimental procedure or concept adequately.Such identification is not intended to imply recommendation or endorsement by the National Institute of Standards and Technology, nor is it intended to imply that the entities, materials, or equipment are necessarily the best available for the purpose.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
A single undetected modification can invalidate an entire chain of evidence and compromise legal admissibility.
“A single undetected modification can invalidate an entire chain of evidence and compromise legal admissibility (Kent et al., 2006; International Organization for Standardization, 2012; Stoyanova et al., 2020).”
From Lightweight Tamper-Evident Log Integrity Verification for IoT Edge Environments: A Merkle Tree Pipeline with Adaptive Chunking (2026) · cites this paper as Kent et al., 2006
The section “Verify the integrity of the data” (page not provided) says that proving evidence has not been tampered with is particularly important for legal purposes and that a chain of custody helps avoid allegations of tampering. It does not say that a single undetected modification can invalidate an entire chain of evidence or make the evidence legally inadmissible. (LLM, conf=0.83)
Experimental — accuracy not yet measuredIntegrity of audit logs produced by IoT devices is a prerequisite for post-incident forensics, regulatory compliance, and operational accountability.
“When these logs serve as evidence in forensic investigations, compliance audits, or incident-response workflows, their integrity is not merely desirable; it is a hard prerequisite (Kebande and Venter, 2017; Cichonski et al., 2012; Kent et al., 2006; International Organization for Standardization, 2012).”
From Lightweight Tamper-Evident Log Integrity Verification for IoT Edge Environments: A Merkle Tree Pipeline with Adaptive Chunking (2026) · cites this paper as Kent et al., 2006
Section 3.1.1 says centralized logging prevents tampering that could impede forensic analysis, and “Verify the integrity of the data” says integrity verification is particularly important when evidence may be needed for legal reasons. The Due Diligence/Regulatory Compliance section connects forensics with regulatory requirements. The guide does not specifically address IoT-device audit logs or establish their integrity as a hard prerequisite for compliance audits and operational accountability. (LLM, conf=0.86)
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Carrier, B. D. (2005) · Cited by 568 · see citing works
Computer Forensics: Incident Response Essentials
Kruse, W. G., & Heiser, J. G. (2001) · Cited by 361 · see citing works
Digital Evidence and Computer Crime
Casey, E. (2000) · International Linear Collider · Cited by 298 · see citing works
Digital Evidence and Computer Crime
Kizza, J. M., & Kizza, F. M. (2011) · IGI Global eBooks · doi:10.4018/9781599043791.ch015 · Cited by 219 · see citing works
The Tao Of Network Security Monitoring: Beyond Intrusion Detection
Bejtlich, R. (2004) · Virtual Defense Library (Ministerio de Defensa) · Cited by 133 · see citing works
Farmer, D., & Venema, W. (2004) · Cited by 121 · see citing works
Handbook of Computer Crime Investigation : Forensic Tools and Technology
Casey, E. (2001) · Cited by 95 · see citing works
Real Digital Forensics: Computer Security and Incident Response
Jones, K. J., Bejtlich, R., & Rose, C. W. (2005) · Cited by 82 · see citing works
Silence on the wire: a field guide to passive reconnaissance and indirect attacks
(2005) · Choice Reviews Online · doi:10.5860/choice.43-0996 · Cited by 47 · see citing works
Incident Response: Computer Forensics Toolkit
Schweitzer, D. (2003) · Cited by 35 · see citing works
(2004) · Elsevier eBooks · doi:10.1016/b978-1-932266-82-5.x5000-4 · Cited by 34 · see citing works
Hacking Exposed Computer Forensics: Secrets & Solutions
Davis, C., Cowen, D. L., & Philipp, A. (2004) · Cited by 11 · see citing works
The effective incident response team
Lucas, J., & Moeller, B. T. (2004) · CERN Document Server (European Organization for Nuclear Research) · Cited by 2 · see citing works
Flagged first, then by citations
1 of the 14 references couldn’t be matched to a known paper.
Research works printed but not linked: 2
- Honeynet Project. Know Your Enemy: Learning about Security Threats, Second Edition.
- Prosise, Chris, et al. Incident Response and Computer Forensics, Second Edition. McGraw-Hill Osborne Media, 2003.
Cited by
Sorted by citations
Guide to Industrial Control Systems (ICS) Security
Stouffer, K., Pillitteri, V., Lightman, S., Abrams, M., & Hahn, A. (2015) · doi:10.6028/nist.sp.800-82r2 · Cited by 1,377 · see citing works
Health IT and Patient Safety: Building Safer Systems for Better Care
Chou, D. (2012) · JAMA · doi:10.1001/jama.308.21.2282-a · Cited by 496 · see citing works
Cyber-physical systems security: Limitations, issues and future trends
Yaacoub, J.-P. A., Salman, O., Noura, H., Kaaniche, N., Chehab, A., & Malli, M. A. (2020) · Microprocessors and Microsystems · doi:10.1016/j.micpro.2020.103201 · Cited by 512 · see citing works
Guide to Cyber Threat Information Sharing
Johnson, C. S., Badger, M. L., Waltermire, D., Snyder, J., & Skorupka, C. (2016) · doi:10.6028/nist.sp.800-150 · Cited by 293 · see citing works
An integrated conceptual digital forensic framework for cloud computing
Martini, B., & Choo, K. R. (2012) · Digital Investigation · doi:10.1016/j.diin.2012.07.001 · Cited by 250 · see citing works
Internet of Things Forensics: Challenges and Approaches
Oriwoh, E., Jazani, D., Epiphaniou, G., & Sant, P. (2013) · International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom) · doi:10.4108/icst.collaboratecom.2013.254159 · Cited by 195 · see citing works
FAIoT: Towards Building a Forensics Aware Eco System for the Internet of Things
Zawoad, S., & Hasan, R. (2015) · IEEE International Conference on Services Computing · doi:10.1109/scc.2015.46 · Cited by 172 · see citing works
Research Trends, Challenges, and Emerging Topics in Digital Forensics: A Review of Reviews
Casino, F., Dasaklis, T. K., Spathoulas, G. P., Αναγνωστόπουλος, Μ., Ghosal, A., Borocz, I. M., Solanas, A., Conti, M., & Patsakis, C. (2022) · IEEE Access · doi:10.1109/access.2022.3154059 · Cited by 167 · see citing works
Fog Computing: Issues and Challenges in Security and Forensics
Wang, Y., Uehara, T., & Sasaki, R. (2015) · IEEE Annual International Computer Software and Applications Conference (COMPSAC) · doi:10.1109/compsac.2015.173 · Cited by 164 · see citing works
Cloud storage forensics: ownCloud as a case study
Martini, B., & Choo, K. R. (2013) · Digital Investigation · doi:10.1016/j.diin.2013.08.005 · Cited by 163 · see citing works
Ruan, K., Carthy, J., Kechadi, T., & Crosbie, M. (2011) · IFIP International Federation for Information Processing/IFIP · doi:10.1007/978-3-642-24212-0_3 · Cited by 155 · see citing works
Zawoad, S., Dutta, A. K., & Hasan, R. (2013) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/2484313.2484342 · Cited by 134 · see citing works
A survey of cloud computing data integrity schemes: Design challenges, taxonomy and future trends
Zafar, F., Khan, A., Malik, S. U. R., Ahmed, M., Anjum, A., Khan, M. I., Javed, N., Alam, M., & Jamil, F. (2016) · Computers & Security · doi:10.1016/j.cose.2016.10.006 · Cited by 131 · see citing works
Cloud forensics: Technical challenges, solutions and comparative analysis
Pichan, A., Lazarescu, M., & Soh, S. (2015) · Digital Investigation · doi:10.1016/j.diin.2015.03.002 · Cited by 130 · see citing works
(2014) · Elsevier eBooks · doi:10.1016/c2013-0-09718-6 · Cited by 125 · see citing works
Organised crime groups in cyberspace: a typology
Choo, K. R. (2008) · Trends in Organized Crime · doi:10.1007/s12117-008-9038-9 · Cited by 115 · see citing works
The impact of automation and artificial intelligence on digital forensics
Jarrett, A., & Choo, K. R. (2021) · Wiley Interdisciplinary Reviews Forensic Science · doi:10.1002/wfs2.1418 · Cited by 107 · see citing works
Cloud Forensics: A Meta-Study of Challenges, Approaches, and Open ProblemsPreprint
Zawoad, S., & Hasan, R. (2013) · arXiv (Cornell University) · doi:10.48550/arxiv.1302.6312 · Cited by 105 · see citing works
Detecting and Preventing Fraud with Data Analytics
Adrian, B. (2015) · Procedia Economics and Finance · doi:10.1016/s2212-5671(15)01485-9 · Cited by 95 · see citing works
A Survey on Digital Forensics in Internet of Things
Hou, J., Li, Y., Yu, J., & Shi, W. (2019) · IEEE Internet of Things Journal · doi:10.1109/jiot.2019.2940713 · Cited by 94 · see citing works
Internet of Things Forensics: A Review
Atlam, H. F., Hemdan, E. E., Alenezi, A., Alassafi, M. O., & Wills, G. B. (2020) · Internet of Things · doi:10.1016/j.iot.2020.100220 · Cited by 93 · see citing works
Towards Building Forensics Enabled Cloud Through Secure Logging-as-a-Service
Zawoad, S., Dutta, A. K., & Hasan, R. (2015) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2015.2482484 · Cited by 90 · see citing works
Forensic analysis of the Windows registry in memory
Dolan-Gavitt, B. (2008) · Digital Investigation · doi:10.1016/j.diin.2008.05.003 · Cited by 91 · see citing works
Understanding Issues in Cloud Forensics: Two Hypothetical Case Studies
Dykstra, J., & Sherman, A. T. (2011) · doi:10.13016/m26uz2-cacf · Cited by 83 · see citing works
Cloud incident handling and forensic‐by‐design: cloud storage as a case study
Rahman, N. H. A., Cahyani, N. D. W., & Choo, K. R. (2016) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.3868 · Cited by 82 · see citing works
BIFF: A Blockchain-based IoT Forensics Framework with Identity Privacy
Le, D.-P., Meng, M. H., Su, L., Yeo, S. L., & Thing, V. L. L. (2018) · IEEE Region 10 Conference (TENCON) · doi:10.1109/tencon.2018.8650434 · Cited by 82 · see citing works
Digital Evidence Challenges in the Internet of Things.
Hegarty, R., Lamb, D. J., & Attwood, A. (2014) · University of Salford Institutional Repository (University of Salford) · Cited by 81 · see citing works
Forensics framework for cloud computing
Alex, M. E., & Kishore, R. (2017) · Computers & Electrical Engineering · doi:10.1016/j.compeleceng.2017.02.006 · Cited by 81 · see citing works
Distributed filesystem forensics: XtreemFS as a case study
Martini, B., & Choo, K. R. (2014) · Digital Investigation · doi:10.1016/j.diin.2014.08.002 · Cited by 80 · see citing works
Asiri, M., Saxena, N., Gjomemo, R., & Burnap, P. (2023) · ACM Transactions on Cyber-Physical Systems · doi:10.1145/3587255 · Cited by 84 · see citing works
The Proactive and Reactive Digital Forensics Investigation Process: A Systematic Literature Review
Alharbi, S. A., Weber-Jahnke, J. H., & Traoré, I. (2011) · Communications in computer and information science · doi:10.1007/978-3-642-23141-4_9 · Cited by 80 · see citing works
Real-time digital forensics and triage
Roussev, V., Quates, C., & Martell, R. (2013) · Digital Investigation · doi:10.1016/j.diin.2013.02.001 · Cited by 80 · see citing works
Khan, S., Gani, A., Wahab, A. W. A., Bagiwa, M. A., Shiraz, M., Khan, S. U., Buyya, R., & Zomaya, A. Y. (2016) · ACM Computing Surveys · doi:10.1145/2906149 · Cited by 79 · see citing works
Rizvi, S., Scanlon, M., McGibney, J., & Sheppard, J. (2022) · IEEE Access · doi:10.1109/access.2022.3214506 · Cited by 76 · see citing works
The Advanced Data Acquisition Model (Adam): A Process Model for Digital Forensic Practice
Adams, R., Hobbs, V., & Mann, G. A. (2013) · The journal of digital forensics, security and law · doi:10.15394/jdfsl.2013.1154 · Cited by 73 · see citing works
Protecting controlled unclassified information in nonfederal systems and organizations
Ross, R., Pillitteri, V. Y., Dempsey, K. L., Riddle, M., & Guissanie, G. (2020) · doi:10.6028/nist.sp.800-171r2 · Cited by 73 · see citing works
Strandberg, K., Nowdehi, N., & Olovsson, T. (2022) · IEEE Transactions on Intelligent Vehicles · doi:10.1109/tiv.2022.3188340 · Cited by 69 · see citing works
Drone Forensics: Challenges and New Insights
Bouafif, H., Kamoun, F., Iqbal, F., & Marrington, A. (2018) · IFIP International Conference on New Technologies, Mobility and Security (NTMS) · doi:10.1109/ntms.2018.8328747 · Cited by 68 · see citing works
Improving Chain of Custody in Forensic Investigation of Electronic Digital Systems
Giova, G., & Politécnica, E. (2011) · Cited by 67 · see citing works
A Machine Learning-based Triage methodology for automated categorization of digital media
Marturana, F., & Tacconi, S. (2013) · Digital Investigation · doi:10.1016/j.diin.2013.01.001 · Cited by 65 · see citing works
Teing, Y., Dehghantanha, A., Choo, K. R., & Yang, L. T. (2016) · Computers & Electrical Engineering · doi:10.1016/j.compeleceng.2016.08.020 · Cited by 64 · see citing works
Security, Cybercrime and Digital Forensics for IoT
Atlam, H. F., Alenezi, A., Alassafi, M. O., Alshdadi, A. A., & Wills, G. B. (2019) · Intelligent systems reference library · doi:10.1007/978-3-030-33596-0_22 · Cited by 64 · see citing works
Watch What You Wear: Preliminary Forensic Analysis of Smart Watches
Baggili, I., Oduro, J., Anthony, K., Breitinger, F., & McGee, G. (2015) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1109/ares.2015.39 · Cited by 64 · see citing works
Evaluation of Digital Forensic Process Models with Respect to Digital Forensics as a ServicePreprint
Du, X., Le‐Khac, N., & Scanlon, M. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1708.01730 · Cited by 62 · see citing works
Kebande, V. R. (2022) · Forensic Science International Reports · doi:10.1016/j.fsir.2022.100257 · Cited by 58 · see citing works
D4I - Digital forensics framework for reviewing and investigating cyber attacks
Dimitriadis, A., Ivezic, N., Kulvatunyou, B., & Mavridis, I. K. (2019) · Array · doi:10.1016/j.array.2019.100015 · Cited by 58 · see citing works
Network Forensics: An Analysis of Techniques, Tools, and Trends
Hunt, R., & Zeadally, S. (2012) · Computer · doi:10.1109/mc.2012.252 · Cited by 57 · see citing works
Towards A Systemic Framework for Digital Forensic Readiness
Elyas, M., Maynard, S. B., Ahmad, A., & Lonie, A. J. (2014) · Journal of Computer Information Systems · doi:10.1080/08874417.2014.11645708 · Cited by 54 · see citing works
Attack Patterns: A New Forensic and Design Tool
Fernández, E. B., Pelaez, J. C., & Larrondo-Petrie, M. M. (2007) · IFIP International Federation for Information Processing/IFIP · doi:10.1007/978-0-387-73742-3_24 · Cited by 54 · see citing works
Investigating the Increase in Mobile Phone Evidence in Criminal Activities
McMillan, J. E. R., Glisson, W. B., & Bromby, M. C. (2013) · Hawaii International Conference on System Sciences (HICSS) · doi:10.1109/hicss.2013.366 · Cited by 53 · see citing works
Cloud Forensics: Identifying the Major Issues and Challenges
Simou, S., Kalloniatis, C., Kavakli, E., & Gritzalis, S. (2014) · Lecture notes in computer science · doi:10.1007/978-3-319-07881-6_19 · Cited by 53 · see citing works
A survey on cloud forensics challenges and solutions
Simou, S., Kalloniatis, C., Gritzalis, S., & Mouratidis, H. (2016) · Security and Communication Networks · doi:10.1002/sec.1688 · Cited by 53 · see citing works
CFaaS: bilaterally agreed evidence collection
Moussa, A. N., Ithnin, N., & Zainal, A. (2018) · Journal of Cloud Computing · doi:10.1186/s13677-017-0102-3 · Cited by 50 · see citing works
Khan, A. A., Shaikh, A. A., Shaikh, Z. A., Laghari, A. A., & Karim, S. (2022) · Multimedia Tools and Applications · doi:10.1007/s11042-022-12398-x · Cited by 50 · see citing works
Data-Driven Decision Support for Optimizing Cyber Forensic Investigations
Nisioti, A., Loukas, G., Lászka, Á., & Panaousis, E. (2021) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2021.3054966 · Cited by 49 · see citing works
Digital Forensics in the Age of Big Data: Challenges, Approaches, and Opportunities
Zawoad, S., & Hasan, R. (2015) · IEEE International Conference on High Performance Computing and Communications; IEEE International Conference on Smart City; IEEE International Conference on Data Science and Systems (HPCC/SmartCity/DSS) · doi:10.1109/hpcc-css-icess.2015.305 · Cited by 48 · see citing works
IoT Forensic: Bridging the Challenges in Digital Forensic and the Internet of Things
Zulkipli, N. H. N., Alenezi, A., & Wills, G. B. (2017) · International Conference on Internet of Things, Big Data and Security (IoTBDS) · doi:10.5220/0006308700001534 · Cited by 48 · see citing works
Michelet, G., & Breitinger, F. (2024) · Forensic Science International Digital Investigation · doi:10.1016/j.fsidi.2023.301683 · Cited by 46 · see citing works
A Survey on Forensics and Compliance Auditing for Critical Infrastructure Protection
Henriques, J., Caldeira, F., Cruz, T., & Simões, P. (2024) · IEEE Access · doi:10.1109/access.2023.3348552 · Cited by 46 · see citing works
OCF: An Open Cloud Forensics Model for Reliable Digital Forensics
Zawoad, S., Hasan, R., & Anthony Skjellum, Y. (2015) · IEEE ... International Conference on Cloud Computing · doi:10.1109/cloud.2015.65 · Cited by 45 · see citing works
Experts reviews of a cloud forensic readiness framework for organizations
Alenezi, A., Atlam, H. F., & Wills, G. (2019) · Journal of Cloud Computing · doi:10.1186/s13677-019-0133-z · Cited by 41 · see citing works
IoT Forensics: An Overview of the Current Issues and Challenges
Janarthanan, T., Bagheri, M., & Zargari, S. A. (2020) · Advanced sciences and technologies for security applications · doi:10.1007/978-3-030-60425-7_10 · Cited by 45 · see citing works
Reasoning about Evidence using Bayesian Networks
Tse, H. K. S., Chow, K.-P., & Kwan, M. (2012) · IFIP International Federation for Information Processing/IFIP · doi:10.1007/978-3-642-33962-2_7 · Cited by 45 · see citing works
Digital Forensics and Cyber Crime Datamining
Sindhu, K. K., & Meshram, B. B. (2012) · Journal of Information Security · doi:10.4236/jis.2012.33024 · Cited by 43 · see citing works
Digital forensics investigations in the Cloud
Thethi, N., & Keane, A. (2014) · IEEE International Advance Computing Conference · doi:10.1109/iadcc.2014.6779543 · Cited by 43 · see citing works
Khanafseh, M., Qatawneh, M., & Almobaideen, W. A. (2019) · International Journal of Advanced Computer Science and Applications · doi:10.14569/ijacsa.2019.0100880 · Cited by 41 · see citing works
Loumachi, F. Y., Ghanem, M. C., & Ferrag, M. A. (2025) · Computers · doi:10.3390/computers14020067 · Cited by 40 · see citing works
A Digital Forensic Readiness framework for South African SME's
Barske, D., Stander, A., & Jordaan, J. (2010) · Information Security for South Africa · doi:10.1109/issa.2010.5588281 · Cited by 40 · see citing works
Park, S., Akatyev, N., Jang, Y., Hwang, J., Kim, D., Yu, W., Shin, H., Han, C., & Kim, J. (2018) · Digital Investigation · doi:10.1016/j.diin.2018.01.012 · Cited by 40 · see citing works
A blockchain-based forensic model for financial crime investigation: the embezzlement scenario
Zarpala, L., & Casino, F. (2021) · Digital Finance · doi:10.1007/s42521-021-00035-5 · Cited by 40 · see citing works
Towards a SCADA Forensics Architecture
Wu, T., Disso, J. P., Jones, K., & Campos, A. (2013) · Electronic workshops in computing · doi:10.14236/ewic/icscsr2013.2 · Cited by 39 · see citing works
CloudMe forensics: A case of big data forensic investigation
Teing, Y., Dehghantanha, A., & Choo, K. R. (2017) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.4277 · Cited by 39 · see citing works
Cloud and Edge Computing-Based Computer Forensics: Challenges and Open Problems
Prakash, V., Williams, A., Garg, L., Savaglio, C., & Bawa, S. (2021) · Electronics · doi:10.3390/electronics10111229 · Cited by 39 · see citing works
Digital Forensics in the Cloud
Zawoad, S., & Hasan, R. (2013) · Cited by 37 · see citing works
An Android Social App Forensics Adversary Model
Azfar, A., Choo, K. R., & Liu, L. (2016) · Hawaii International Conference on System Sciences (HICSS) · doi:10.1109/hicss.2016.693 · Cited by 36 · see citing works
James, J. I., & Gladyshev, P. (2013) · Digital Investigation · doi:10.1016/j.diin.2013.04.005 · Cited by 36 · see citing works
A Comprehensive Review on Adaptability of Network Forensics Frameworks for Mobile Cloud Computing
Khan, S., Shiraz, M., Wahab, A. W. A., Gani, A., Qi, H., & Rahman, Z. B. A. (2014) · The Scientific World JOURNAL · doi:10.1155/2014/547062 · Cited by 36 · see citing works
A Cloud Forensic Readiness Model Using a Botnet as a Service
Kebande, V. R., & Venter, H. S. (2014) · doi:10.13140/2.1.4880.2249 · Cited by 36 · see citing works
Positioning Your Organization to Respond to Insider Threats
Greitzer, F. L., Purl, J., Leong, Y. M., & Sticha, P. J. (2019) · IEEE Engineering Management Review · doi:10.1109/emr.2019.2914612 · Cited by 35 · see citing works
Greening Cloud-Enabled Big Data Storage Forensics: Syncany as a Case Study
Teing, Y., Dehghantanha, A., Choo, K. R., Muda, Z., & Abdullah, M. T. (2017) · IEEE Transactions on Sustainable Computing · doi:10.1109/tsusc.2017.2687103 · Cited by 35 · see citing works
BlockSLaaS: Blockchain Assisted Secure Logging-as-a-Service for Cloud Forensics
Rane, S., & Dixit, A. M. (2019) · Communications in computer and information science · doi:10.1007/978-981-13-7561-3_6 · Cited by 35 · see citing works
ForensiBlock: A Provenance-Driven Blockchain Framework for Data Forensics and Auditability
Akbarfam, A. J., Heidaripour, M., Maleki, H., Dorai, G., & Agrawal, G. (2023) · IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA) · doi:10.1109/tps-isa58951.2023.00025 · Cited by 33 · see citing works
A GENERIC DATABASE FORENSIC INVESTIGATION PROCESS MODEL
Al-Dhaqm, A., Razak, S. B. A., Othman, S. H., Nagdi, A., & Ali, A. (2016) · Jurnal Teknologi · doi:10.11113/jt.v78.9190 · Cited by 33 · see citing works
Computer forensics: past, present and future
(2003) · Information Security Technical Report · doi:10.1016/s1363-4127(03)00204-8 · Cited by 33 · see citing works
Mobile device forensics: A snapshot
Tassone, C., Martini, B., Choo, K. R., & Slay, J. (2013) · Australian Institute of Criminology eBooks · doi:10.52922/ti239109 · Cited by 32 · see citing works
Forensics-as-a-Service (FaaS): Computer Forensic Workflow Management and Processing Using Cloud
Wen, Y., Man, X., Le, K., & Shi, W. L. (2013) · Cited by 32 · see citing works
A Novel Intrusion Detection and Prevention Scheme for Network Coding-Enabled Mobile Small Cells
Parsamehr, R., Esfahani, A., Μαντάς, Γ., Radwan, A., Mumtaz, S., Rodrı́guez, J., & Martínez-Ortega, J.-F. (2019) · IEEE Transactions on Computational Social Systems · doi:10.1109/tcss.2019.2949153 · Cited by 33 · see citing works
Towards a capability maturity model for digital forensic readiness
Englbrecht, L., Meier, S., & Pernul, G. (2019) · Wireless Networks · doi:10.1007/s11276-018-01920-5 · Cited by 31 · see citing works
The State of the Art Forensic Techniques in Mobile Cloud Environment
Faheem, M., Kechadi, T., & Le‐Khac, N. (2015) · International Journal of Digital Crime and Forensics · doi:10.4018/ijdcf.2015040101 · Cited by 30 · see citing works
IIoT Digital Forensics and Major Security issues
Gudlur, V. V. R., & Raju, V. (2020) · doi:10.1109/icci51257.2020.9247685 · Cited by 30 · see citing works
Digital Forensic Investigation Tools and Procedures
Sindhu, K. K., & Meshram, B. B. (2012) · International Journal of Computer Network and Information Security · doi:10.5815/ijcnis.2012.04.05 · Cited by 30 · see citing works
SecLaaS: Secure Logging-as-a-Service for Cloud ForensicsPreprint
Zawoad, S., Dutta, A. K., & Hasan, R. (2013) · arXiv (Cornell University) · doi:10.48550/arxiv.1302.6267 · Cited by 32 · see citing works
Forensic Investigation of Cooperative Storage Cloud Service: Symform as a Case Study
Teing, Y., Dehghantanha, A., Choo, K. R., Dargahi, T., & Conti, M. (2016) · Journal of Forensic Sciences · doi:10.1111/1556-4029.13271 · Cited by 29 · see citing works
Forensic Inspection of Sensitive User Data and Artifacts from Smartwatch Wearable Devices
Odom, N. R., Lindmar, J. M., Hirt, J., & Brunty, J. (2019) · Journal of Forensic Sciences · doi:10.1111/1556-4029.14109 · Cited by 29 · see citing works
A Review and Comparative Study of Digital Forensic Investigation Models
Kyei, K., Zavarsky, P., Lindskog, D., & Ruhl, R. (2013) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-642-39891-9_20 · Cited by 29 · see citing works
A standardised data acquisition process model for digital forensic investigations
Montasari, R. (2017) · International Journal of Information and Computer Security · doi:10.1504/ijics.2017.085139 · Cited by 29 · see citing works
Beyond digital forensics. A cloud computing perspective over incident response and reporting
Pătraşcu, A., & Patriciu, V.-V. (2013) · IEEE International Symposium on Applied Computational Intelligence and Informatics (SACI) · doi:10.1109/saci.2013.6609018 · Cited by 28 · see citing works
A forensics and compliance auditing framework for critical infrastructure protection
Henriques, J., Caldeira, F., Cruz, T., & Simões, P. (2023) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2023.100613 · Cited by 26 · see citing works
Network Forensics for Cloud Computing
Gebhardt, T., & Reiser, H. P. (2013) · Lecture notes in computer science · doi:10.1007/978-3-642-38541-4_3 · Cited by 26 · see citing works
Cryptographic Techniques for Data Privacy in Digital Forensics
Ogunseyi, T. B., & Adedayo, O. M. (2023) · IEEE Access · doi:10.1109/access.2023.3343360 · Cited by 25 · see citing works
- Authors
- Kent, K., Chevalier, S., Grance, T., & Dang, H.
- Affiliations
- National Institute of Standards and Technology (US)
- Published
- 2006
- OpenAlex
- W2628759714
- Cited by
- 590
- References
- 14
- Citations by year
- 2026: 33 · 2025: 32 · 2024: 31 · 2023: 36 · 2022: 34 · 2021: 37 · 2020: 52 · 2019: 49 · 2018: 35 · 2017: 40 · 2016: 39 · 2015: 38 · 2014: 38 · 2013: 43 · 2012: 24
- Type
- report
- Language
- en
- Open access
- gold
- doi.org
- Licence
- public-domain
- Topics
- Physical Sciences › Computer Science › Information Systems › Digital and Cyber Forensics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Social Sciences › Political Science and International Relations › Education, Law, and Society
- Keywords
- forensic computing, digital forensics, incident response, digital evidence, cybersecurity
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
