IoT forensic procedure for Forensic Laboratories of the Colombian National Police.

• DOI: https://doi.org/10.22533/at.ed.216542520023

• Palavras-chave: Forensic laboratory, Internet of things, cybersecurity, digital evidence.

• Keywords: Forensic laboratory, Internet of things, cybersecurity, digital evidence.

• Abstract:

  Research on IoT forensic procedures contributes to the development of cybersecurity practices globally. This descriptive-propositional study, focused on the creation of a forensic procedure for IoT aimed at forensic investigators of the National Police of Colombia, was divided into 2 research phases, Phase I related to the analysis of scientific evidence found in databases using the PRISMA method and Phase II concerning the standardized proposal. The results indicate that the creation of a procedure within the Colombian National Police is a complex procedure that requires careful consideration of a variety of institutional parameters, among which are: alignment with the mission and vision of the institution, compliance with legal regulations, compatibility with institutional policies, operational feasibility, inter-institutional participation, and continuous improvement. These provide the guarantee that the procedure is not only effective in practice, but also fully in line with the objectives and values of the Colombian National Police. It is important to note that the proper acquisition of persistent, volatile, network packet and smartcard data is critical in the investigation of adverse security events associated with dIoT in Colombia, following the procedures detailed above can ensure that digital evidence is collected and preserved in a manner that is admissible and useful in legal proceedings, while respecting relevant legal and ethical considerations.