Methodology for an Open Digital Forensics Model Based on CAINE

With the widespread adoption of public and private cloud computing environments, in addition to traditional enterprise-class data centers, cybersecurity has become increasingly important. In particular, forensic analysis of digital evidence has received increased attention. We investigate a relatively new suite of cyber-forensic tools in the open source CAINE Linux distribution. We propose how tools such as Guymager, Autopsy, Fred, and Photorec can be applied as part of a four tier forensic architecture. Experimental results are provided which demonstrate the application of these tools in a practical investigation.