Date Approved

2025

Degree Type

Open Access Senior Honors Thesis

Department or School

Information Security and Applied Computing

First Advisor

James Banfield, Ph.D.

Second Advisor

Sean Che, Ph.D.

Third Advisor

Ann R. Eisenberg, Ph.D.

Abstract

This project studied how current artificial intelligence large language models could be used to learn digital forensics and anti-forensics techniques compared to traditional search engines such as Google Search. This project aimed to answer the question “Can an ordinary person use AI to learn both anti-forensics and traditional digital forensics skills effectively and efficiently?”. The project research was divided into two distinct phases. Phase one consisted of the creation of a fictional case by acting as a layperson using the help of the Microsoft Copilot AI tool. This case consisted of a layperson “suspect” attempting to learn multiple anti-forensics techniques to obfuscate and/or delete information from their computer to impede the efforts of a potential investigation. Phase two consisted of two parts, the first of which was a person attempting to learn digital forensics techniques using the same Microsoft Copilot AI tool to undo these actions that were taken within phase one. The second part of this phase consisted of the researcher using their existing forensics knowledge to attempt to gain as much information as possible from the case that was created in phase one. After these phases were completed, the results were analyzed and compared with one another to determine the effectiveness of the AI tool compared to methodologies learned through traditional means. The results of this project showed that the Microsoft Copilot AI tool was able to provide significant legitimate information on performing both forensics and anti-forensics actions with only a few errors when using specific tools. However, some of these errors made a substantial impact on the research as they would cause laypeople to be unable to use said tools without additional knowledge they would not have. Once the project experiment was completed, ethical considerations of these tools were also discussed.

Share

COinS