ABSTRACT

The Scope and Complexity of the Internet has grown exponentially. This growth has made digital forensic investigation a very challenging task. Even the modest intra-organizational networks have sufficient network traffic to pose a problem for digital crime investigators to police and collect evidences. Another problem in Network based Crime Investigation is that Offline Mining Techniques do not yield pervasive evidence. At the same time due to voluminous traffic, live evidence mining becomes a challenge. This paper presents a technique to optimize the live evidence mining by using the principles of apriori algorithm to trigger the evidence collection mechanism at right and opportune moment. The crux of this technique is answering “When & What Information” to Collect about a subject of investigation or Data.