To effectively represent mass of events oriented data, automated methods for extracting event records and then classifying events and patterns of events into higher level terminology and vocabulary are necessary. Rich representation model and automated methods of correlating event information expressed in such models are becoming a necessity. The Resource Description Framework for Forensics (RDF) framework was developed with the strategic objective “to develop a means by which a consolidated repository of event information can be constituted and then queried in order to provide an investigator with post hoc event correlation.
Keywords: Correlation, Digital Evidence, Framework
