The Investigative Process Model by Eoghan Casey, which is also known as the Staircase Model, provides a practical and methodical step-by-step guide to conduct an effective digital investigation. This model is depicted as a sequence of ascending stairs that begin at the incident alert or accusation and end at the testimony. The steps are meant to be as generic as possible. This model tries to merge police duties and tasks of forensic experts. The following points explain each step of the Investigative Process Model and the difference between dealing with smartphones and computers:
Incident Alerts or Accusation: The accusation is the start signal for the whole process. In this phase, the sources are evaluated and detailed inquiries are requested.
Assessment of worth: In the scope of the assessment of worth, the interest of prosecution is compared to the costs that would be incurred to prosecute the criminal action. For companies, this often results in...