This artice is free to access.
Because of the way computers operate, every discrete event potentially leaves a digital trace. These digital traces must be retrieved during a digital forensic investigation to prove or refute an alleged crime. Given resource constraints, it is not always feasible (or necessary) for law enforcement to retrieve all the related digital traces and to conduct comprehensive investigations. This paper attempts to address the issue by proposing a model for conducting swift, practical and cost-effective digital forensic investigations.
Overill, R., Kwan, M., Chow, K. P., Lai, P., & Law, F. (2009). A cost-effective model for digital forensic investigations. In IFIP Advances in Information and Communication Technology (Vol. 306, pp. 231–240). Springer New York LLC. https://doi.org/10.1007/978-3-642-04155-6_17