Abstract:More than ever before, the world is nowadays experiencing increased cyber-attacks in all areas of our daily lives. This situation has made combating cybercrimes a daily struggle for both individuals and organisations. Furthermore, this struggle has been aggravated by the fact that today's cybercriminals have gone a step ahead and are able to employ complicated cyber-attack techniques. Some of those techniques are minuscule and inconspicuous in nature and often camouflage in the facade of authentic requests and commands. In order to combat this menace, especially after a security incident has happened, cyber security professionals as well as digital forensic investigators are always forced to sift through large and complex pools of data also known as Big Data in an effort to unveil Potential Digital Evidence (PDE) that can be used to support litigations. Gathered PDE can then be used to help investigators arrive at particular conclusions and/or decisions. In the case of cyber forensics, what makes the process even tough for investigators is the fact that Big Data often comes from multiple sources and has different file formats. Forensic investigators often have less time and budget to handle the increased demands when it comes to the analysis of these large amounts of complex data for forensic purposes. It is for this reason that the authors in this paper have realised that Deep Learning (DL), which is a subset of Artificial Intelligence (AI), has very distinct use-cases in the domain of cyber forensics, and even if many people might argue that it's not an unrivalled solution, it can help enhance the fight against cybercrime. This paper therefore proposes a generic framework for diverging DL cognitive computing techniques into Cyber Forensics (CF) hereafter referred to as the DLCF Framework. DL uses some machine learning techniques to solve problems through the use of neural networks that simulate human decision-making. Based on these grounds, DL holds the potential to dramatically change the domain of CF in a variety of ways as well as provide solutions to forensic investigators. Such solutions can range from, reducing bias in forensic investigations to challenging what evidence is considered admissible in a court of law or any civil hearing and many more.

Temporal metadata analysis: A learning classifier system approach

SDOT: Secure Hash, Semantic Keyword Extraction, and Dynamic Operator Pattern-Based Three-Tier Forensic Classification Framework

Methodology for the Automated Metadata-Based Classification of Incriminating Digital Forensic Artefacts

A complete formalized knowledge representation model for advanced digital forensics timeline analysis

Measuring Accuracy of Automated Parsing and Categorization Tools and Processes in Digital Investigations

Detective: Automatically Identify and Analyze Malware Processes in Forensic Scenarios Via DLLs

Latent Text Mining for Cybercrime Forensics

Temporal assessment of malicious behaviors: application to turnout field data monitoring

Toward identifying malicious encrypted traffic with a causality detection system

Taxonomy of Digital Forensics: Investigation Tools and Challenges

Audit-LLM: Multi-Agent Collaboration for Log-based Insider Threat Detection

The Case for Temporal Transparency: Detecting Policy Change Events in Black-Box Decision Making Systems

Correlating Processes for Automatic Memory Evidence Analysis

Temporal fingerprints: Identity matching across fully encrypted domain

TemporalFED: Detecting Cyberattacks in Industrial Time-Series Data Using Decentralized Federated Learning

Diverging deep learning cognitive computing techniques into cyber forensics

On User Interaction Behavior As Evidence For Computer Forensic Analysis

SeqA-ITD: User Behavior Sequence Augmentation for Insider Threat Detection at Multiple Time Granularities

Retrieval-Augmented Mining of Temporal Logic Specifications from Data

Temporal graph-based approach for behavioural entity classification

TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time (Extended Version)