Project Management in Digital Forensic Investigations
Greg Gogolin, Isaac Gogolin, Seth Gogolin · Journal of Forensic Sciences & Criminal Investigation · 2023
Digital forensic investigations often occur in crisis mode or with little advanced notice. Digital forensic examiner background and expertise can vary widely, and all too often forensic training is specific to a particular tool set. These factors can limit the ability to manage digital forensic projects. Project management has been used in the Information Technology field for decades, and many of the benefits of this type of structured approach can lead to stronger and more consistent investigation outcomes. This article proposes utilizing project management principles such as developing a project plan with time estimates and dependencies, risk management, and a post case review to improve digital forensic case management. The combination of project management and utilizing best practices in an investigation execution strategy for digital forensic investigations can lead to improved outcomes.