A framework for cybercrime digital evidence acquisition

Abstract

Over the years, the field of digital forensics has grown significantly, and courts have seen an increase in cases pertaining to it. In today’s technologically advanced culture, the prevalence of computer/cyber-connected criminal attacks has increased the demand for digital evidence in court. It is vital to successfully prosecute those who commit such crimes and hold them accountable. Digital forensics is the procedure used to obtain the evidence presented in these court cases. The main aim of the research was to design a framework for cybercrime digital evidence acquisition that would be adopted for use during the digital crime evidence acquisition process with the following specific objectives, i) to establish requirements for the framework adopted by private organizations and law enforcement agencies for Uganda in cybercrime evidence acquisition; ii) to develop a framework that adopts the use of digital evidence acquisition processes by computer forensics practitioners in Uganda; and iii) to evaluate the performance of the framework that adopts the use of digital evidence acquisition processes by computer forensics practitioners in Uganda. Research results from the survey indicate that there is a need to establish requirements for the framework adopted by private organizations and law enforcement agencies in Uganda, and the results of the entire framework were tested and evaluated by the simulation using data and tools like Autopsy and FTK Imager. It was concluded that achieving proficiency in digital forensics involves a holistic understanding of evidence encounters, effective handling, and adept presentation for it to be admissible to courts of law. The dynamic nature of the field necessitates adaptability to emerging tools, techniques, and best practices. Also, continuous professional development and collaboration with legal experts are crucial for maintaining high standards in digital evidence analysis and its admissibility to the court.