Beyond Keywords

Keyword searching is the primary tool investigators use to identify relevant evidence in a data set. However, poorly chosen keywords can miss important items or return too many irrelevant results. As data volumes grow, investigators must find better ways to focus on the items of interest within very large data sets. In this article we explain how visualising communication networks, timelines, maps and links between data sources can rapidly establish key players, their locations and their involvement in a matter of interest, all supported by forensic artefacts required for provenance.

Find out more - subscribe to DFM today and read the full article. Or if you're a subscriber, login and read the article online.