Beyond Keywords: Is Keyword Search Becoming Obsolete In The New Age Of Forensic Digital Investigation?

Keyword searching is the primary tool investigators use to identify relevant evidence in a data set. However, poorly chosen keywords can miss important items or return too many irrelevant results. As data volumes grow, investigators must find better ways to focus on the items of interest within very large data sets.

Expert forensic technician and investigator James Billingsley explains how visualising communication networks, timelines, maps and links between data sources can rapidly establish key players, their locations and their involvement in a matter of interest – all supported by forensic artefacts required for provenance.

Read the full article featured on the Forensic Focus website.

James Billingsley

Principal Solutions Consultant, Cybersecurity & Investigations

James has a decade of experience in computer forensics. Before joining Nuix, he worked as a Senior Breach Investigation Consultant leading PCI forensic investigations for clients including Visa and MasterCard.

As a Certified Examiner, James has supported UK Police Force and government agency investigations and served as an expert witness in UK courts. James has contributed to web browser forensics software tools which law enforcement agencies and international corporations around the world use.

Read More