Description

The Internet is the most significant invention of the time and its emergence has created unparalleled opportunities for business, research, education, entertainment and social discourse. Although these deviations came with a lot of positive sides, it also includes a plethora of cybercrime. Cybercrime is an umbrella term which includes a number of illegal activities where most of them are an assault on the individual, corporate, or government information. Cybercrimes have not only been recognized as a dominant challenge for investigative agencies but also an intangible nature with no physical violence or the presence of the offender at the scene of crime. While interventions, digital evidence can be crucial in numerous crimes like child pornography, data theft, corporate espionage, malware, online fraud, defamation, stalking, terrorism etc. In any crime involving digital evidence, digital forensics may be employed. At present, rapid technological advancements are perpetually challenging the digital forensic where the process begins with searching and seizing the digital evidence followed by preservation and analysis to submitting the findings in the form of a report. Acquisition of the digital evidence requires a standard procedure to be followed in order to ensure it is collected correctly. Since, it can determine the suspect's guilt or innocence. But it is unfortunate that in spite of tedious efforts by the digital forensic investigator's, many of the cases remain unsolved because of lack of comprehensive framework. So, this motivated to develop and propose a new framework for digital forensic investigation which can reduce time for investigation by custom content imaging, can detect and counter malwares by incorporating memory acquisition and analysis process. This thesis is a comprehensive compilation of new framework for post exploitation analysis of cybercrime.