Abstract:

This paper proposes the exploration of the use of Backward Chaining as one of the many methods utilized in the automated approach to events’ analysis in the area of computer forensics. In addition, steps to be taken are outlined in developing an expert system that implements such a method. The new method compliments other methods that traditionally focus on searching files and performing pattern matching. Specifically, this approach is explored to complement other advanced tools in automated data analysis.