Theme: 01 The continued identification of new types of evidence from “traditional” evidence sources, such as mobile devices, workstations and servers. By exploring best practices to extract mobile digital evidence and its main challenges, experts may introduce new methods and tools to improve the overall investigation process and underline the need for shared and up to date protocols for the digital forensic workflow.
Theme: 02 The identification of emerging data sources, such as the cloud, cryptocurrency and the multitude of technologies that fall under the umbrella of the internet of things. This has led to the identification of new obstacles for digital forensic operators, namely encryption, pervasive access, responsibility attribution and the unclear boundary of these new systems. Nonetheless, these new challenges have further enhanced research on the development of tools in relation to emerging technologies.
Theme: 03 Third, experiences and approaches for managing forensic investigations from both a technological perspective (e.g. the adoption of cloud-based technologies) and a process-perspective (e.g. to prevent inter-team friction and burnout). Within this, a number of relevant subjects may emerge, in terms of the proper use of open source tools, the importance of coding skills, and highlighting risks arising from multiple sources of stress that digital forensics investigators may encounter.