Visual analysis of portable computer forensic data

Abstract

From the portable computer forensic data represented in a tabular form with the same pattern, it is not easy to find out features about user behaviors or draw relationships between data. Especially, it is almost impossible to detect the meaningful forensic evidences from the collected tabular-form data when large amounts of data are acquired and multiple data are needed to be analyzed at the same time. In this paper, we propose intuitive and visual analysis of forensic events using a graphic element not a tabular form to represent efficiently and meaningfully the collected portable forensic data. © 2013 Springer Science+Business Media.