Email addresses extracted from secondary storage devices are important to a forensic
analyst when conducting an investigation. They can provide insight into the users social …

The ability to find email addresses on digital storage media and deduce the relationships
between them is critical for the success of many law enforcement and intelligence collection …

Digital forensic analysts depend on the ability to understand the social networks of the
individuals they investigate. We develop a novel method for automatically constructing these …

Intelligence analysts depend on the ability to understand the social networks of suspects
and adversaries. We develop a novel method for automatically discovering this information …

Drives found during investigations often have useful information in the form of email
addresses which can be acquired by search in the raw drive data independent of the file …

Low-level criminals, who do the legwork in a criminal organization, are the most likely to be
arrested, whereas the high-level ones tend to avoid attention. But crippling the work of …

Purpose–The purpose of this paper is to propose a novel approach that automates the
visualisation of both quantitative data (the network) and qualitative data (the content) within …

Evaluation of forensics evidence is an essential step in proving the malicious intents of an
attacker or adversary and the severity of the damages caused to any network. This paper …

E-mail features as a key technology for both the dissemination of information and for social
networking. Given the volume of e-mail transmission combined with access opportunities, it …

Digital data collected for forensics analysis often contain valuable information about the
suspects' social networks. However, most collected records are in the form of unstructured …