通过高效的工作流程管理和自动化提高数字调查员的可用性
Increasing digital investigator availability through efficient workflow management and automation
摘要：
数字存储容量和多样性设备的增长对执法中的数字取证实验室产生了重大的时间影响。积压已司空见惯，越来越多的时间花在调查的获取和准备步骤上，而不是花在详细的证据分析和报告上。执法数字取证单位的数字调查能力普遍没有增加的余地，分配给这些单位的预算往往在减少。在开发一个有效的调查过程的背景下，一个关键的挑战是如何实现更多的与less. This本文提出了一个工作流管理自动化框架处理常见的数字取证工具。其目标是简化数字调查工作流程，从而更有效地利用有限的硬件和软件。拟议的自动化框架减少了数字取证专家浪费在执行耗时但必要的任务上的时间。通过服务器端自动化减少了证据处理时间，从而实现了24/7的证据准备。拟议的框架提高了取证软件和硬件的使用效率，降低了基础设施成本和许可证费用，并简化了数字调查员的准备步骤。所提出的方法在现实世界的情况下进行评估，以评估其鲁棒性，并突出其优点。
英文摘要：
The growth of digital storage capacities and diversity devices has had a significant time impact on digital forensic laboratories in law enforcement. Backlogs have become commonplace and increasingly more time is spent in the acquisition and preparation steps of an investigation as opposed to detailed evidence analysis and reporting. There is generally little room for increasing digital investigation capacity in law enforcement digital forensic units and the allocated budgets for these units are often decreasing. In the context of developing an efficient investigation process, one of the key challenges amounts to how to achieve more with less. This paper proposes a workflow management automation framework for handling common digital forensic tools. The objective is to streamline the digital investigation workflow - enabling more efficient use of limited hardware and software. The proposed automation framework reduces the time digital forensic experts waste conducting time-consuming, though necessary, tasks. The evidence processing time is decreased through server-side automation resulting in 24/7 evidence preparation. The proposed framework increases efficiency of use of forensic software and hardware, reduces the infrastructure costs and license fees, and simplifies the preparation steps for the digital investigator. The proposed approach is evaluated in a real-world scenario to evaluate its robustness and highlight its benefits.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
