Digital Forensics: A Primer on Keyword Searching

June 24, 2022

A typical digital forensic investigation can consist of reviewing and searching through hundreds of thousands of files on a computer system, mobile phone, or tablet. Not every file is going to be of interest or pertinent to the matter. The cost of reviewing files is always a factor and can add up very quickly when billing at a high hourly rate.

This is where keyword searching is one option that can be used to sift through the data set. With the right set of keywords, an examiner can filter down a large data set to locate potentially relevant information quickly. However, there are some common mistakes that attorneys often make when providing search terms that can have the opposite effect, costing more money and returning a large data set full of irrelevant or false positive search hits.

Read the entire article here.