Digital Forensics Explained, 2nd Edition

Chapter 12Link and visual analysis

Introduction

The digital forensic process involves discovering information in an attempt to provide insight into actions and events. The details that explain what has occurred are often lacking, and in some situations almost nothing is known about what has happened. Sifting through digital media in an organized and methodical way can shed light on what has occurred, but there can be so many apparently unconnected pieces of information that developing a clear picture is nearly impossible. The usage of link and visual analysis (LAVA) techniques provides a way to organize and analyze the information pertinent to an investigation and develop a better understanding of the actions and events of interest.

Previously, ...