Abstract
Digital forensics, the science of recovering and investigating material found in digital devices, is a critical component of modern justice and cybersecurity systems. The rapid evolution of the digital landscape—characterized by the proliferation of cloud computing, mobile devices, Internet of Things (IoT), and sophisticated anti-forensic techniques—presents continuous challenges to established investigative practices. This systematic review synthesizes the state-of-the-art in digital forensics, charting the advancements, persistent challenges, and future trajectories of the field. Following the PRISMA guidelines, this review analyzes 85 peer-reviewed articles published between 2021 and 2025, selected from the IEEE Xplore, ACM Digital Library, and Scopus databases. The results are thematically organized into key areas: forensic tools and techniques, data acquisition and preservation, cloud and mobile forensics, and legal and ethical considerations. Key findings reveal a significant trend towards the integration of Artificial Intelligence (AI) for automating analysis, the development of new frameworks for cloud and IoT forensics, and a growing tension between investigative needs and data privacy regulations. The review identifies a critical gap between the pace of technological innovation and the development of standardized, legally admissible forensic procedures for these new environments. The discussion interprets these findings, analyzing their implications for investigators, organizations, and policymakers. We conclude by outlining a forward-looking research agenda focused on enhancing forensic readiness, developing resilient forensic techniques against anti-forensic measures.
This work is licensed under a Creative Commons Attribution 4.0 International License.
Copyright (c) 2024 Patrick B. Tarlit