Creating a Triage Tool to Streamline Digital Forensics Investigation

The escalating sophistication and frequency of cyberattacks necessitate efficient and reliable digital forensic investigations. Traditional manual forensic methodologies are increasingly overwhelmed by the volume, velocity, and variety of digital evidence. This paper presents the design, development, and initial evaluation of a novel triage tool aimed at streamlining digital forensics investigations. The tool implements a systematic and automated workflow encompassing multi-stage data processing: initial data collection from network traffic captures, rigorous pre-processing incorporating Keccak-256 hashing for robust data integrity verification, secure database storage, evidence validation utilizing Elliptic Curve Cryptography (ECC) based digital signatures for non-repudiation, and AES- 256 encryption for comprehensive data confidentiality. The system offers an intuitive, interactive frontend interface for investigators to conduct analysis and visualize findings, culminating in the automated generation of structured, legally admissible CSV reports. By automating critical triage tasks, integrating state-of-the-art cryptographic techniques, and providing a streamlined workflow, this tool is designed to significantly enhance the efficiency, accuracy, and reliability of digital forensic investigations, thereby contributing to strengthened cybersecurity posture and improved incident response capabilities.