Digital Forensics in the Age of Large Language Models
Not on the map. Why?
Abstract (arXiv)
Digital forensics plays a pivotal role in modern investigative processes, utilizing specialized methods to systematically collect, analyze, and interpret digital evidence for judicial proceedings. However, traditional digital forensic techniques are primarily based on manual labor-intensive processes, which become increasingly insufficient with the rapid growth and complexity of digital data. To this end, Large Language Models (LLMs) have emerged as powerful tools capable of automating and enhancing various digital forensic tasks, significantly transforming the field. Despite the strides made, general practitioners and forensic experts often lack a comprehensive understanding of the capabilities, principles, and limitations of LLM, which limits the full potential of LLM in forensic applications. To fill this gap, this paper aims to provide an accessible and systematic overview of how LLM has revolutionized the digital forensics approach. Specifically, it takes a look at the basic concepts of digital forensics, as well as the evolution of LLM, and emphasizes the superior capabilities of LLM. To connect theory and practice, relevant examples and real-world scenarios are discussed. We also critically analyze the current limitations of applying LLMs to digital forensics, including issues related to illusion, interpretability, bias, and ethical considerations. In addition, this paper outlines the prospects for future research, highlighting the need for effective use of LLMs for transparency, accountability, and robust standardization in the forensic process.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Builds on 31 of its 114 references that are in the map. First posted on arXiv 3 Apr 2025.
Builds on
31 of 114 references.
References · 31
- 2021Evaluating Large Language Models Trained on Codecited by 8,320
- 2023A Survey of Large Language Modelscited by 2,576
- 2023A Survey on Evaluation of Large Language Modelscited by 1,242
- 2023A Comprehensive Overview of Large Language Modelscited by 648
- 2023Harnessing the Power of LLMs in Practice: A Survey on ChatGPT and Beyondcited by 411
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 387
- 2023Explainability for Large Language Models: A Surveycited by 333
- 2023Exploring the Potential of Large Language Models (LLMs) in Learning on Graphscited by 274
- 2022Talking About Large Language Modelscited by 175
- 2019FAHT: An Adaptive Fairness-aware Decision Tree Classifiercited by 63
- 2024Fairness in Large Language Models: A Taxonomic Surveycited by 58
- 2024History, Development, and Principles of Large Language Models-An Introductory Surveycited by 30
19 more
- 2020Disentangled Dynamic Graph Deep Generationcited by 27
- 2022Longitudinal Fairness with Censorshipcited by 22
- 2024Generative AI in Cybersecurity: A Comprehensive Review of LLM Applications and Vulnerabilitiescited by 21
- 2022Fairness Amidst Non-IID Graph Data: A Literature Reviewcited by 20
- 2024A Survey of AI-generated Text Forensic Systems: Detection, Attribution, and Characterizationcited by 19
- 2023Rethinking Learning Rate Tuning in the Era of Large Language Modelscited by 16
- 2025LLM-based event log analysis techniques: A surveycited by 16
- 2023Fair Decision-making Under Uncertaintycited by 15
- 2024Large Language Models for Networking: Workflow, Advances and Challengescited by 15
- 2024FairAIED: Navigating Fairness, Bias, and Ethics in Educational AI Applicationscited by 15
- 2023Towards Fair Machine Learning Software: Understanding and Addressing Model Bias Through Counterfactual Thinkingcited by 14
- 2023Fundamentals of Generative Large Language Models and Perspectives in Cyber-Defensecited by 13
- 2024Toward Adaptive Large Language Models Structured Pruning via Hybrid-grained Weight Importance Assessmentcited by 13
- 2023Preventing Discriminatory Decision-making in Evolving Data Streamscited by 12
- 2023Individual Fairness under Uncertaintycited by 11
- 2024Fairness Definitions in Language Models Explainedcited by 11
- 2024Exploring the Potential of Large Language Models for Improving Digital Forensic Investigation Efficiencycited by 7
- 2024Fairness in Large Language Models in Three Hourscited by 7
- 2016Current Challenges and Future Research Areas for Digital Forensic Investigationcited by 1
Built on by
Citing papers per year: 2025: 9; 2026: 1.
10 papers.
- 2025SoK: Trust-Authorization Mismatch in LLM Agent Interactionscited by 11
- 2025Generative AI in Depth: A Survey of Recent Advances, Model Variants, and Real-World Applicationscited by 5
- 2025DFIR-Metric: A Benchmark Dataset for Evaluating Large Language Models in Digital Forensics and Incident Responsecited by 4
- 2025AMCR: A Framework for Assessing and Mitigating Copyright Risks in Generative Modelscited by 3
- 2025Towards Transparent AI: A Survey on Explainable Language Modelscited by 3
- 2025Fairness-Aware Graph Representation Learning with Limited Demographic Informationcited by 1
- 2025INSIGHT: An Interpretable Neural Vision-Language Framework for Reasoning of Generative Artifactscited by 1
- 2025Generation of Programmatic Rules for Document Forgery Detection Using Large Language Modelscited by 1
- 2025ForensicsData: A Digital Forensics Dataset for Large Language Modelscited by 0
- 2026Structural Inference in Undocumented Mobile Databases: A Reproducible Benchmark for Evaluating Agentic Reasoning in Digital Forensicscited by 0
- 2026Structural Inference in Undocumented Mobile Databases: A Reproducible Benchmark for Evaluating Agentic Reasoning in Digital Forensics21 Aug 2026
- 2025Generation of Programmatic Rules for Document Forgery Detection Using Large Language Models22 Dec 2025
- 2025SoK: Trust-Authorization Mismatch in LLM Agent Interactions7 Dec 2025
- 2025INSIGHT: An Interpretable Neural Vision-Language Framework for Reasoning of Generative Artifacts27 Nov 2025
- 2025Fairness-Aware Graph Representation Learning with Limited Demographic Information17 Nov 2025
- 2025Generative AI in Depth: A Survey of Recent Advances, Model Variants, and Real-World Applications23 Oct 2025
- 2025Towards Transparent AI: A Survey on Explainable Language Models25 Sep 2025
- 2025ForensicsData: A Digital Forensics Dataset for Large Language Models31 Aug 2025
- 2025AMCR: A Framework for Assessing and Mitigating Copyright Risks in Generative Models31 Aug 2025
- 2025DFIR-Metric: A Benchmark Dataset for Evaluating Large Language Models in Digital Forensics and Incident Response26 May 2025