Searching for IOCs in Forensic Evidence

Abstract

The rise of digital crime as an inevitable consequence of the transversality of technology in all aspects of life has generated until today -and will keep doing so in the future- the need for the Justice to have adequate tools to give answers to society. Digital Forensics is the branch of forensics sciences that provides the means to find solutions in crimes where technology takes a key role, be it as a method, mean or end. One of the biggest challenges in this discipline is when potentially unknown malware is involved in the case. As malware can be varied in characteristics and the threats it poses, its analysis is difficult, and drawing conclusions challenging. For this reason, it is imperative to have a guideline that provides a valid framework to act upon and analyze digital evidence originating from a malware infected device and obtain conclusive indicators that enrich the experts witness work.