Fit4D

Forensic Investigation Toolkit for Developing Countries (FIT4D) Software User manual

University of Colombo School of Computing, Sri Lanka

Introduction
FIT4D is a software toolkit which isspecially designed for digital forensic investigations done in developing countries. It is a clear set of guidelines which are appropriate for solving any type of computer related cyber crimes indeveloping country like Sri Lanka. This document provides the outline of the forensic analysis model and the general forensic analysis procedure carried out by the forensic examiners using FIT4D. FIT4Dcontains features such as case management, disk image extraction, data carving and recovery, data categorization, providing more simple views for data analysis and some search functionalities in version 1.Some additional features are going to be added in the future versions such as artificial intelligence and data mining integrations. FIT4D will best fit to the current investigation procedure carriedout by the forensic experts in Sri Lanka and it will utilize existing resources. Furthermore it will be enriched with a user friendly interface which will help police officers/any user with poorcomputer literacy to identify evidence in earlier stages of the investigation process before going to a forensic expert. Furthermore it can be easily expanded to include any number of additional phasesrequired in the future. This document describes the general forensic investigation procedure (step by step) for an investigator to carry out digital investigation procedure. Finally we are describing themain features of the proposed model and their usefulness in the context of developing country.

General Procedure for using FIT4D
The following outlines standard processing procedures used inexamining digital evidence in the process of forensic investigation. 1. when the police officer brought hard drive which is supposed to be contain any evidence to the admin forensic examiner, he will...