Focusing on the identification, preservation, analysis, and presentation of digital evidence in the context of cybersecurity incidents.
Digital Forensics is a critical research area dedicated to uncovering and analyzing evidence from digital devices and systems following security breaches, criminal activity, or policy violations. This topic encompasses techniques for data recovery, forensic imaging, timeline reconstruction, and artifact interpretation across various platforms, including computers, mobile devices, and cloud environments. Research also addresses legal admissibility, chain of custody, and evolving challenges such as encrypted data and anti-forensic tactics. As cyber incidents grow in complexity and frequency, digital forensics plays a vital role in investigation, accountability, and support for law enforcement and legal processes.
Contact cyber@uq.edu.au for more information.
