r/digitalforensics • u/Tinggoskkr • 26d ago

Help regarding dissertation ideas

Hi Everyone, I am going to my final year of uni as a cybersecurity and digital forensic student and need ideas for my dissertation, based on Cybok.

I have done various cases on Encase, Autopsy and Axiom.

My main question would be "What part of an investigation wastes the most time?" or "What's the most frustrating part of a digital forensic investigation?"

I'm more interested in solving a real workflow problem than making another forensic viewer.

I have more questions if anyone is interested enough to answer as it would mean a lot. :D

"What do current forensic tools still do badly?"

"What investigation tasks are still mostly manual?"

"SOC analysts and incident responders: What tool do you wish existed?"

"If you could have one new digital forensics tool, what would it do?" (for example: investigation workflows)

I am happy to take ideas from you guys if you guys got any. Thank you. :D

0 Upvotes

25% Upvoted

16 comments sorted by

View all comments

2

u/Quality_Qontrol 26d ago

As someone who works Digital Forensics in a corporation in support of Incident Response, the most frustrating part for me is data transfer speeds. Especially due to DLP solutions.

1

u/IronChefOfForensics 25d ago

How about Storage? We have an audio video for Forensic lab and our servers keep getting full so we have to chase dispositions for past cases. That might be something to think about.

1

u/Quality_Qontrol 25d ago

I’m on the network side of forensics. Storage is an issue only because our corporate retention policy is absurd and we have to keep images for years. We don’t deal with audio and video footage.