Working towards the development of a digital tool to enhance at-scene triage of digital evidence across crime types.
| Lead institution | |
|---|---|
| Principal researcher(s) |
Dr Mark Warner (UCL), Dr Maria MacLennan (University of Edinburgh), Prof Niamh Nic Daeid (University of Dundee), Dr Oriola Sallavaci (University of Essex), Prof Sarah Morris (University of Southampton), Dr Valeria Abreu (UCL), and Cathy O'Brien (UCL)
|
| Police region |
London
|
| Collaboration and partnership |
|
| Level of research |
Professional/work based
|
| Project start date |
|
Research context
Over 90% of reported crime has a digital element, with most digital evidence seized by front-line officers who often lack digital forensic awareness and training (National Police Chiefs' Council (NPCC) 2020). Even those with advanced training, such as digital media investigators (DMIs), can find it challenging to stay up to date with the speed of technological developments and its use in crime (Wilson-Kovacs 2021).
Prior research as well as government reports highlight the significant backlog in digital evidence processing. Current approaches to identifying, seizing and examining devices are also recognised as being insufficient and in need of modernisation (His Majesty's Inspectorate of Constabulary and Fire & Rescue Services (HMICFRS) 2022). Triage in its various forms in digital forensics has emerged as one solution to coping with the challenges brought forth by the increasing numbers of seized devices, and the resulting disparity between service demand and available resources (Wilson-Kovacs 2021).
This project aims to understand how a digital tool could support front-line officers apply a consistent and evidence-based approach to performing triage of digital evidence at-scene across different crime types and policing operating models.
Research methodology
This project will apply a grounded theory approach to develop the theoretical underpinning of digital evidence search and seizure, throughout data collection. We will be collecting data through observations, semi-structured interviews and document and literature review. We aim to interview:
- digital forensic investigators (including digital strategy advisors)
- non-specialist officers with recent experience of search and seizure (including search planning)
- digital media investigators (DMIs)
- senior officers and staff involved in search at a strategic level
- private digital forensic practitioners
- criminal law experts
- experts in policing ethics
Summary of findings
This project was completed in July 2026. The full research reports are now available:
- Abreu Minero V and others. (2026). Digital triage in policing: Project report. University College London.
- Warner M, Abreu VM and O'Brien C. (2026). Police officers are not the enemy: Applying usable security knowledge and principles to digital device triage in policing. In: Festschrift A, Symposium for Professor Angela Sasse. University College London.
References
Dodge A and others. (2019). 'This isn’t your father’s police force': Digital evidence in sexual assault investigations'. Australian & New Zealand Journal of Criminology, volume 52, issue 4, pages 499 to 515.
Gibbs Van Brunschot E and others. (2023). ''Poisoned chalice?’: The challenges of forensic science and technology for homicide investigations'. Police Practice and Research, volume 24, issue 4, pages 475 to 492.
HMICFRS. (2022). An inspection into how well the police and other agencies use digital forensics in their investigations, His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services.
House of Lords Science and Technology Select Committee. (2019). Forensic science and the criminal justice system: a blueprint for change.
NPCC. (2020). ‘Digital forensic science strategy’. NPCC.
Parsonage H. (2009). ‘Computer forensics case assessment and triage’.
Wilson-Kovacs D. (2021). 'Digital media investigators: challenges and opportunities in the use of digital forensics in police investigations in England and Wales'. Policing: An International Journal, volume 44, issue 4, pages 669 to 682.