Review on mining and investigation of criminal records from digital devices

In computer forensics analysis, hundreds and thousands of files are usually examined. Lots of the data present in those files consists of unstructured text, and the analysis of those texts difficult to be performed by computer examiners. For that there is a need of automated methods of analysis. In particular, algorithms for clustering documents can help the discovery of new and useful knowledge from the document under analysis. For that document clustering can be used for forensic analysis digital devices in police investigations. Document clustering has great potential to be useful for computer inspection. The clusters of either relevant or irrelevant documents can facilitate computer examiners to efficiently focus on the most relevant documents instead of inspecting all of them. This paper focuses on the method of document clustering for investigation of criminal records from digital devices.