This artice is free to access.
Research in digital forensics has yet to focus on modeling case domain information involved in investigations. This paper shows how concept mapping can be used to create an excellent alternative to the popular checklist approach used in digital forensic investigations. Concept mapping offers several benefits, including creating replicable, reusable techniques, simplifying and guiding the investigative process, capturing and reusing specialized forensic knowledge, and supporting training and knowledge management activities. The paper also discusses how concept mapping can be used to integrate case-specific details throughout the investigative process.
Tanner, A., & Dampier, D. (2009). Concept mapping for digital forensic investigations. In IFIP Advances in Information and Communication Technology (Vol. 306, pp. 291–300). Springer New York LLC. https://doi.org/10.1007/978-3-642-04155-6_22