← Back to the atlas
No. 1190Problem statementSecurity and governance

Creating a cyber triage tool to streamline digital forensic investigation

Source

Source summary

Create an accessible digital-forensics and incident-response triage tool that imports forensic disk images and other evidence, analyses files/logs/registry/network records and identifies indicators of compromise. Use AI/ML anomaly and pattern analysis with scoring to prioritise artefacts for investigators. Provide interactive timelines, graphical summaries and reports exportable as PDF, JSON and CSV. This is an evidence-review workflow, not an intrusion tool.