Title: Digital Forensics Workflow as A Mapping Model for People, Evidence, and Process in Digital Investigation

Issue Number: Vol. 7, No. 3
Year of Publication: Sep - 2018
Page Numbers: 294-304
Authors: Subekti Ningsih, Yudi Prayudi, Imam Riadi
Journal Name: International Journal of Cyber-Security and Digital Forensics (IJCSDF)
- Hong Kong
DOI:  http://dx.doi.org/10.17781/P002463


Digital forensic investigations must have references and procedures, and so many digital forensic models are developed according to different needs and focus. The average model focuses on the Phases of investigation, but has not yet explained the mechanism of the digital forensic process. This makes the interaction between digital forensic components cannot be exposed, but these components are very complex, i.e. actors, evidence, and processes in digital forensics activities all related to documentation in accordance with the chain of custody rules. The solution offered for this problem is the development of the Digital Forensic Workflow Model (DFWM) using the Business Process Model and Notation (BPMN) approach as a standard notation for describing semantic processes with Design Science Research Methodology. The use of Design Science Research is appropriate because it wants to generate a new artifact, which is an integrated digital forensic workflow model. DFWM makes the digital forensic investigation process more structured and exposes the accuracy of actors who must engage in digital forensic activity in accordance with systematic workflow sequences. DFWM performed system validation process and validation using acceptance questionnaires by law enforcers, Experts, and Digital Forensics Analysts, so DFWM can be applied in real digital forensic practice.