Evidences Extraction and Analysis Challenges

With each passing day, the incidence of cybercrimes targeted at various organizations is on the rise. Concurrently, the approaches to committing such crimes are evolving, notably through the development of new malicious software and the employment of novel tactics and techniques for malicious activities. This evolution necessitates the modernization of the investigation process as well as enhancing the efficiency of professionals working in this field. This article examines and organizes the challenges encountered during the investigation of cybercrimes, particularly in the extraction and analysis of evidence. Based on an analysis of these challenges, unified algorithms for the stages of evidence extraction and analysis are developed, which can be applied in both the scientific and technical domains, specifically in the investigation of computer crimes. It is anticipated that the proposed algorithms will increase the efficiency of the investigation stages under consideration and will serve as a starting point for the development of specific and general methodologies for cybercrime investigation.