Contact Dr Graeme Horsman
- Tel: +44 (0) 1234 988423
- Email: Graeme.Horsman@cranfield.ac.uk
- Twitter: @GraemeHorsman
- Google Scholar
Background
Graeme Horsman has over 9 years of experience in teaching and research in higher education in the areas of digital forensic and cyber investigation. His education includes a BSc Computer Forensics degree, Masters of Jurisprudence, PhD and Postgraduate Certificate of Higher Education Practice. He is also a Senior Fellow of the Higher Education Academy. To date, he has published over 75 articles in international peer-reviewed venues in the digital forensics area, where his research interests lie in the areas of:
Investigation quality standards and procedures.
Tool evaluation.
Digital evidence interpretation and communication.
Mobile device and online investigations.
Digital investigation law.
Research opportunities
Graeme is interested in research and collaboration in many areas of digital investigation, with a particular focus on:
Quality control and assurance mechanisms for digital investigations.
Digital crime scene processing.
Testing for digital forensic evidence.
Interpreting digital evidence.
Publications
Articles In Journals
- Horsman G. (2025). Reviewing the devices of those subject to Sexual Harm Prevention Orders (SHPOs): iOS opportunities, limitations and strategies. Australian Journal of Forensic Sciences, 57(1)
- Horsman G. (2025). GAMEPLANS: a template for robust digital evidence strategy development. Journal of Forensic Sciences, 70(1)
- Bauge RK, Ryser E, Sunde N & Horsman G. (2025). Evaluating the scope of peer review in digital Forensics: insights from Norway and the U.K.. Science & Justice, 65(2)
- Horsman G. (2024). Sources of error in digital forensics. Forensic Science International: Digital Investigation, 48
- Horsman G. (2024). Investigative opportunities from smart heating technology: a preliminary evaluation. Australian Journal of Forensic Sciences, 57(3)
- Horsman G. (2024). A template for creating and sharing ground truth data in digital forensics. Journal of Forensic Sciences, 69(4)
- Horsman G. (2024). Understanding and comparing digital traces. Australian Journal of Forensic Sciences, ahead-of-print(ahead-of-print)
- Horsman G & Dodd A. (2024). Competence in digital forensics. Forensic Science International: Digital Investigation, 51
- Horsman G. (2024). Commentary:- Can I use that tool?. Forensic Science International: Digital Investigation, 51
- Michelet G, Breitinger F & Horsman G. (2023). Automation for digital forensics: towards a definition for the community. Forensic Science International, 349(August)
- Horsman G. (2023). The importance of digital evidence strategies. WIREs Forensic Science, 6(1)
- Horsman G. (2023). Identifying fake vs. real communication records: a case study. Forensic Science International: Reports, 8
- Horsman G. (2023). Interpreting digital traces:- 8 foundational pillars to support the formation of opinion in digital forensics. Science & Justice, 64(1)
- Horsman G, Ryser E & Shavers B. (2023). Fostering an “investigating mindset”: Why is it important in digital forensic science education?. WIREs Forensic Science, 6(3)
- Horsman G. (2022). When is a line of inquiry ‘reasonable’? - a focus on digital devices. Australian Journal of Forensic Sciences, 55(4)
- Horsman G. (2022). Forming an investigative opinion in digital forensics. WIREs Forensic Science, 4(6)
- Horsman G. (2022). Considering ‘technically possible’ alternative meanings for data traces found during a digital forensic examination. Australian Journal of Forensic Sciences, 55(5)
- Horsman G. (2022). Technical reporting in digital forensics. Journal of Forensic Sciences, 67(6)
- Horsman G. (2022). That tool is rubbish!...or is it?. Science & Justice, 62(5)
- Horsman G. (2022). The Hierarchy of Case Priority (HiCaP):- A proposed method for case prioritisation in digital forensic laboratories. Science & Justice, 62(5)
- Horsman G. (2022). Digital evidence strategies for digital forensic science examinations. Science & Justice, 63(1)
- Horsman G. (2022). Can signs of digital coercive control be evidenced in mobile operating system settings? - A guide for first responders. Forensic Science International: Digital Investigation, 44(March)
- Lim Y, Youn M, Chung H, Park J, Horsman G, .... (2022). Characterizing client-side caches of audiovisual content sharing services: Findings and suggestions for forensics. Journal of Information Security and Applications, 65
- Horsman G. (2022). Defining principles for preserving privacy in digital forensic examinations. Forensic Science International: Digital Investigation, 40
- Horsman G & Shavers B. (2022). Who is the digital forensic expert and what is their expertise?. WIREs Forensic Science, 4(5)
- Horsman G & Sunde N. (2022). Unboxing the digital forensic investigation process. Science & Justice, 62(2)
- Horsman G. (2022). Conducting a ‘manual examination’ of a device as part of a digital investigation. Forensic Science International: Digital Investigation, 40
- Horsman G. (2022). An “order of data acquisition” for digital forensic investigations. Journal of Forensic Sciences, 67(3)
- Horsman G. (2022). Triaging digital device content at-scene:- Formalising the decision-making process. Science & Justice, 62(1)
- Horsman G. (2022). “Scaffolding” responses to digital forensic inquiries. WIREs Forensic Science, 4(4)
- Horsman G. (2021). Digital evidence and the crime scene. Science & Justice, 61(6)
- Horsman G & Lyle JR. (2021). Dataset construction challenges for digital forensics. Forensic Science International: Digital Investigation, 38
- Horsman G. (2021). Decision support for first responders and digital device prioritisation. Forensic Science International: Digital Investigation, 38
- Horsman G. (2021). The different types of reports produced in digital forensic investigations. Science & Justice, 61(5)
- Horsman G. (2021). Defining ‘service levels’ for digital forensic science organisations. Forensic Science International: Digital Investigation, 38
- Horsman G. (2021). Contemporaneous notes for digital forensic examinations. Forensic Science International: Digital Investigation, 37
- Horsman G. (2021). Standardizing digital forensic examination procedures: A look at Windows 10 in cases involving images depicting child sexual abuse. WIREs Forensic Science, 3(6)
- Sunde N & Horsman G. (2021). Part 2: The Phase-oriented Advice and Review Structure (PARS) for digital forensic investigations. Forensic Science International: Digital Investigation, 36
- Horsman G. (2021). The COLLECTORS ranking scale for ‘at‐scene’ digital device triage. Journal of Forensic Sciences, 66(1)
- Horsman G. (2021). A case study on anonymised sharing platforms and digital traces left by their usage. Science & Justice, 61(1)
- Fulea-Magarit T, Page H & Horsman G. (2021). Placing the suspect at a PC: A preliminary study involving fingerprints on keyboards and mice. Science & Justice, 61(1)
- Horsman G. (2021). Digital tool marks (DTMs): a forensic analysis of file wiping software. Australian Journal of Forensic Sciences, 53(1)
- Horsman G & Sunde N. (2020). Part 1: The need for peer review in digital forensics. Forensic Science International: Digital Investigation, 35
- Thompson TJU, Collings AJ, Earwaker H, Horsman G, Nakhaeizadeh S, .... (2020). Forensic undergraduate education during and after the COVID-19 imposed lockdown: Strategies and reflections from India and the UK. Forensic Science International, 316
- Horsman G. (2020). Plain text passwords: A forensic RAM-raid. Science & Justice, 60(6)
- Horsman G & Aney Biju Mammen M. (2020). A glance at digital forensic academic research demographics. Science & Justice, 60(5)
- Horsman G. (2020). The challenge of identifying historic ‘private browsing’ sessions on suspect devices. Forensic Science International: Digital Investigation, 34
- Franqueira VNL & Horsman G. (2020). Towards Sound Forensic Arguments: Structured Argumentation Applied to Digital Forensics Practice. Forensic Science International: Digital Investigation, 32
- Horsman G. (2020). Opinion: Does the field of digital forensics have a consistency problem?. Forensic Science International: Digital Investigation, 33
- Houck MM, Horsman G, Sauzier G & Bidmos M. (2020). Erratum to “What is open-access publishing and what it means for the forensic enterprise” [Forensic Sci. Int.: Synergy (2019) 290–293]. Forensic Science International: Synergy, 2
- Sauzier G, Horsman G, Bodner M & Bidmos MA. (2020). 2020 - A new decade of forensic science. Forensic Science International: Reports, 2
- Horsman G. (2020). ACPO principles for digital evidence: Time for an update?. Forensic Science International: Reports, 2
- Horsman G. (2020). Digital Evidence Certainty Descriptors (DECDs). Forensic Science International: Digital Investigation, 32
- Horsman G. (2020). Part 2:- quality assurance mechanisms for digital forensic investigations: Knowledge sharing and the Capsule of Digital Evidence (CODE). Forensic Science International: Reports, 2
- Horsman G & Errickson D. (2019). When finding nothing may be evidence of something: Anti-forensics and digital tool marks. Science & Justice, 59(5)
- Errickson D, Giles S & Horsman G. (2019). The CSI effect(s no one?). Journal of Forensic and Legal Medicine, 67
- Threadgall R & Horsman G. (2019). An examination of gaming platform policies for law enforcement support. Digital Investigation, 31
- Horsman G. (2019). Reconstructing cached video stream content:- Part 2. Digital Investigation, 31
- Horsman G, Findlay B, Edwick J, Asquith A, Swannell K, .... (2019). A forensic examination of web browser privacy-modes. Forensic Science International: Reports, 1
- Sauzier G, Bidmos M & Horsman G. (2019). Bolstering forensic science through extended knowledge sharing. Forensic Science International: Reports, 1
- Asquith A & Horsman G. (2019). Let the robots do it! – Taking a look at Robotic Process Automation and its potential application in digital forensics. Forensic Science International: Reports, 1
- Houck MM, Horsman G, Sauzier G & Bidmos M. (2019). What is open-access publishing and what it means for the forensic enterprise. Forensic Science International: Synergy, 1
- Horsman G. (2019). Raiders of the lost artefacts: Championing the need for digital forensics research. Forensic Science International: Reports, 1
- Horsman G. (2019). A Call for the Prohibition of Encryption: Panacea or Problem?. IEEE Security & Privacy, 17(2)
- Horsman G. (2019). Tool testing and reliability issues in the field of digital forensics. Digital Investigation, 28
- Horsman G, Findlay B & James T. (2019). Developing a ‘router examination at scene’ standard operating procedure for crime scene investigators in the United Kingdom. Digital Investigation, 28
- Horsman G. (2019). Formalising investigative decision making in digital forensics: Proposing the Digital Evidence Reporting and Decision Support (DERDS) framework. Digital Investigation, 28
- Page H, Horsman G, Sarna A & Foster J. (2019). A review of quality procedures in the UK forensic sciences: What can the field of digital forensics learn?. Science & Justice, 59(1)
- Horsman G, Caithness A & Katsavounidis C. (2019). A Forensic Exploration of the Microsoft Windows 10 Timeline. Journal of Forensic Sciences, 64(2)
- Horsman G. (2019). A Forensic Examination of Online Search Facility URL Record Structures. Journal of Forensic Sciences, 64(1)
- Horsman G. (2019). Loose‐Lipped Mobile Device Intelligent Personal Assistants: A Discussion of Information Gleaned from Siri on Locked
iOS Devices. Journal of Forensic Sciences, 64(1) - Horsman G, Page H & Beveridge P. (2018). A preliminary assessment of latent fingerprint evidence damage on mobile device screens caused by digital forensic extractions. Digital Investigation, 27
- Horsman G. (2018). A forensic examination of the technical and legal challenges surrounding the investigation of child abuse on live streaming platforms: A case study on Periscope. Journal of Information Security and Applications, 42
- Horsman G. (2018). Reconstructing streamed video content: A case study on YouTube and Facebook Live stream content in the Chrome web browser cache. Digital Investigation, 26
- Horsman G & King A. (2018). Policing and Crime Act 2017: Changes to pre-charge bail and the impact on digital forensic analysis. Computer Law & Security Review, 34(5)
- Horsman G. (2018). “I couldn't find it your honour, it mustn't be there!” – Tool errors, tool limitations and user error in digital forensics. Science & Justice, 58(6)
- Horsman G. (2018). I didn't see that! An examination of internet browser cache behaviour following website visits. Digital Investigation, 25
- Horsman G. (2018). Web Content Management Systems: An Analysis of Forensic Investigatory Challenges. Journal of Forensic Sciences, 63(5)
- Horsman G. (2018). Framework for Reliable Experimental Design (FRED): A research framework to ensure the dependable interpretation of digital data for digital forensics. Computers & Security, 73
- Horsman G. (2018). Combatting those who intentionally access images depicting child sexual abuse on the Internet: A call for a new offence in England and Wales. Computer Law & Security Review, 34(1)
- Horsman G, Ginty K & Cranner P. (2017). Identifying offenders on Twitter: A law enforcement practitioner guide. Digital Investigation, 23
- Horsman G. (2017). Can we continue to effectively police digital crime?. Science & Justice, 57(6)
- Horsman G. (2017). A survey of current social network and online communication provision policies to support law enforcement identify offenders. Digital Investigation, 21
- Horsman G. (2016). Digital forensics: Understanding the development of criminal law in England and Wales on images depicting child sexual abuse. Computer Law & Security Review, 32(3)