151
12
lInK anD VIsual analYsIs
Introduction
e digital forensic process involves discovering information in an attempt to provide
insight into actions and events. e details that explain what has occurred are often
lacking, and in some situations almost nothing is known about what has happened.
Sifting through digital media in an organized and methodical way can shed light
on what has occurred, but there can be so many apparently unconnected pieces of
information that developing a clear picture is nearly impossible. e usage of link and
visual analysis (LAVA) techniques provides a way to organize and analyze the infor-
mation pertinent to an investigation and develop a better understanding of the actions
and events of interest.
Previously, we have ...