A Social Network Discovery Model for Digital Forensics Investigations
Alexander John Karran, John S. Haggerty, David J. Lamb, Mark John Taylor, David Llewellyn‐Jones · 2011
Our continued reliance on email communications ensures that this type of data remains a major source of evidence during a digital investigation. Due to the many applications and data types, there is no standard email format. Therefore, much current work in the forensic investigation of emails has focused on data extraction. This paper focuses on the investigatory process and posits a model for social network discovery for use in digital investigations. This model is applied to the widely used Enron email corpus to demonstrate its applicability.