A Grounded Theory Approach to Identifying and Measuring Forensic Data Acquisition Tasks
 

Gregory H. Carlton, Ph.D.
California State Polytechnic University
Pomona, California USA
ghcarlton@csupomona.edu
 

ABSTRACT

As a relatively new field of study, little empirical research has been conducted pertaining to computer forensics. This lack of empirical research contributes to problems for practitioners and academics alike.
For the community of practitioners, problems arise from the dilemma of applying scientific methods to legal matters based on anecdotal training methods, and the academic community is hampered by a lack of theory in this evolving field. A research study utilizing a multi-method approach to identify and measure tasks practitioners perform during forensic data acquisitions and lay a foundation for academic theory development was conducted in 2006 in conjunction with a doctoral dissertation.

An overview of the study’s findings is presented within this article.
 

Keywords:  computer forensics, digital forensics, forensic data acquisition, forensic protocol, grounded theory