Notes

The five important digital pieces of evidence for conducting forensic examinations in a smart city environment are as follows:
a) Digital Footprints: The IP addresses, login timestamps, and command histories that hackers leave behind can reveal important information about their identity and methods of operation. Finding possible attackers and reconstructing the attack's timing can be accomplished by tracking digital footprints across many devices and systems.
b) Social Engineering Artefacts: Email logs, communication transcripts, and hacked accounts may contain proof of the social engineering techniques used by cybercriminals, such as phishing emails, false emergency warnings, and fraudulent messages. Social engineering artefact analysis can reveal the psychological manipulation strategies used to trick and take advantage of victims.
c) Security Camera: By employing deepfake technology to impersonate city officials or interfere with traffic signals, security camera video recordings provide clear evidence of illegal activity. Examining video evidence can assist in locating offenders and determining the scope of their behaviour.
d) System Memory Dumps: During an attack, memory dumps from compromised devices provide snapshot of the system's status, including active processes, network connections, and malware that resides in memory. Memory dump analysis is a useful tool for detecting malware signatures, locating the source of system infection, and estimating the amount of harm caused by cyberattacks.
e) Network Traffic Data: Tracking the spread of AI-driven malware and harmful interactions between hackers and compromised systems is made easier by recording network traffic between linked devices. Cyberattack indicators might be found in unusual traffic patterns through deep packet inspection.