MADIK: A Collaborative Multi-agent ToolKit to Computer Forensics

Bruno W. P. Hoelz, Célia Ghedini Ralha, Rajiv Geeverghese, Hugo C. Junior

Abstract: In this article, we present MADIK, a Multi-Agent Digital Investigation ToolKit to help experts during the forensic examination process. MADIK uses a four layer multi-agent architecture, as a metaphor to the organizational hierarchy levels: strategic, tactical, operational and specialist. The proposed architecture and tool was developed under a blackboard approach, implemented with Java Agent DEvelopment Framework - JADE, using Java Expert System Shell - JESS as an inference engine. We have done some experiments with MADIK using real data, on stand alone and distributed environments with encouraging results.