A Novel Forensic Readiness Framework Applicable to the Drone Forensics Field

Table 3

Common concepts and processes.

No.	Propose common processes and concepts	Candidate concepts and processes	Frequency
1	Monitoring and capturing	Monitoring and capturing	3
		Seizure	1
2	Data Acquisition	Gathering evidence	1
		Data acquisition	3
3	Intruder Activity	Intruder’s transactions	1
		Intruder activity	2
		Malicious transaction	1
4	Data Collected	Data collected	8
		Acquired data	1
5	Reconstruction	Reconstructing log events	1
		Reconstruction	5
		Reconstruction event	1
		Reconstructing	1
6	Hashing	Hashing	4
7	Examination	Examination	5
8	Backup	Backup	5
9	Preservation	Preservation	4
10	Investigation Team	Investigation Team	9
		Forensic examiner	1
		Examiner	1
11	Integrity	Evidence integrity	1
		Integrity	2
12	Source	Resources	1
		Source	5
13	Evidence	Evidence	6
14	Drone Incident	Event	4
		Drone Incident	5
15	Hashed Value	Hashed Value	3
16	Rehashing	Rehashing	3
17	Log File	Log file	8
		database log file	1
18	Incident Responding	Incident response	1
		Incident responding	1
19	Drone	Drone	7
		UAV	5
20	Court	Court	5
		Court of law	2
21	Live Response	Live response	3
22	Forensic Technique	Forensic Techniques	2
		Investigation extraction methods	1
23	Timeline	Timeline	5
24	Interview	Interview	2
25	Volatile Artefact	Volatile artefact	2
26	Nonvolatile Artefact	Nonvolatile Artefact	2
27	Decision	Decision	2
28	Report	Forensic report	1
		Report	2
		Final forensic report	1
29	Artefact	Artefacts	3
30	Live Acquisition	live acquisition	2
31	Dead Acquisition	Dead acquisition	2
32	Hybrid Acquisition	Hybrid acquisition	2
Total			150

Bold shows total of common process and concepts.