{"id":"https://openalex.org/W4412627879","doi":"https://doi.org/10.1145/3748264","title":"Fine-Tuning Large Language Models for Digital Forensics: Case Study and General Recommendations","display_name":"Fine-Tuning Large Language Models for Digital Forensics: Case Study and General Recommendations","publication_year":2025,"publication_date":"2025-07-24","ids":{"openalex":"https://openalex.org/W4412627879","doi":"https://doi.org/10.1145/3748264"},"language":"en","primary_location":{"id":"doi:10.1145/3748264","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3748264","pdf_url":null,"source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1145/3748264","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092251664","display_name":"Ga\u00ebtan Michelet","orcid":"https://orcid.org/0000-0002-8844-3425"},"institutions":[{"id":"https://openalex.org/I179225836","display_name":"University of Augsburg","ror":"https://ror.org/03p14d497","country_code":"DE","type":"education","lineage":["https://openalex.org/I179225836"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Ga\u00ebtan Michelet","raw_affiliation_strings":["Chair for Cybersecurity, University of Augsburg, Augsburg, Germany and School of Criminal Justice, University of Lausanne, Lausanne, Switzerland","Chair for Cybersecurity, University of Augsburg, Germany and School of Criminal Justice, University of Lausanne, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-8844-3425","affiliations":[{"raw_affiliation_string":"Chair for Cybersecurity, University of Augsburg, Augsburg, Germany and School of Criminal Justice, University of Lausanne, Lausanne, Switzerland","institution_ids":["https://openalex.org/I179225836"]},{"raw_affiliation_string":"Chair for Cybersecurity, University of Augsburg, Germany and School of Criminal Justice, University of Lausanne, Switzerland","institution_ids":["https://openalex.org/I179225836"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060543873","display_name":"Hans Henseler","orcid":"https://orcid.org/0009-0009-2810-442X"},"institutions":[{"id":"https://openalex.org/I121797337","display_name":"Leiden University","ror":"https://ror.org/027bh9e22","country_code":"NL","type":"education","lineage":["https://openalex.org/I121797337"]},{"id":"https://openalex.org/I158244335","display_name":"Netherlands Forensic Institute","ror":"https://ror.org/04s2z4291","country_code":"NL","type":"facility","lineage":["https://openalex.org/I158244335"]},{"id":"https://openalex.org/I210716285","display_name":"University of Applied Sciences Leiden","ror":"https://ror.org/0093src13","country_code":"NL","type":"education","lineage":["https://openalex.org/I210716285"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Hans Henseler","raw_affiliation_strings":["Netherlands Forensic Institute, The Hague, Netherlands   and Leiden University of Applied Sciences, Leiden, Netherlands","Netherlands Forensic Institute, The Netherlands and Leiden University of Applied Sciences, The Netherlands"],"raw_orcid":"https://orcid.org/0009-0009-2810-442X","affiliations":[{"raw_affiliation_string":"Netherlands Forensic Institute, The Hague, Netherlands   and Leiden University of Applied Sciences, Leiden, Netherlands","institution_ids":["https://openalex.org/I158244335","https://openalex.org/I210716285","https://openalex.org/I121797337"]},{"raw_affiliation_string":"Netherlands Forensic Institute, The Netherlands and Leiden University of Applied Sciences, The Netherlands","institution_ids":["https://openalex.org/I158244335"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028212750","display_name":"Harm van Beek","orcid":"https://orcid.org/0000-0002-6128-5201"},"institutions":[{"id":"https://openalex.org/I7876267","display_name":"Open University of the Netherlands","ror":"https://ror.org/018dfmf50","country_code":"NL","type":"education","lineage":["https://openalex.org/I7876267"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Harm van Beek","raw_affiliation_strings":["Netherlands Forensic Institute, The Hague, Netherlands   and Open Universiteit, Heerlen, Netherlands","Netherlands Forensic Institute, The Netherlands and Open Universiteit, The Netherlands"],"raw_orcid":"https://orcid.org/0000-0002-6128-5201","affiliations":[{"raw_affiliation_string":"Netherlands Forensic Institute, The Hague, Netherlands   and Open Universiteit, Heerlen, Netherlands","institution_ids":["https://openalex.org/I7876267"]},{"raw_affiliation_string":"Netherlands Forensic Institute, The Netherlands and Open Universiteit, The Netherlands","institution_ids":["https://openalex.org/I7876267"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033950555","display_name":"Mark Scanlon","orcid":"https://orcid.org/0000-0002-6581-7164"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Mark Scanlon","raw_affiliation_strings":["University College Dublin, Dublin, Ireland","University College Dublin, Ireland"],"raw_orcid":"https://orcid.org/0000-0002-6581-7164","affiliations":[{"raw_affiliation_string":"University College Dublin, Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]},{"raw_affiliation_string":"University College Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068630039","display_name":"Frank Breitinger","orcid":"https://orcid.org/0000-0001-5261-4600"},"institutions":[{"id":"https://openalex.org/I142270456","display_name":"Technische Hochschule Augsburg","ror":"https://ror.org/016604a03","country_code":"DE","type":"education","lineage":["https://openalex.org/I142270456"]},{"id":"https://openalex.org/I179225836","display_name":"University of Augsburg","ror":"https://ror.org/03p14d497","country_code":"DE","type":"education","lineage":["https://openalex.org/I179225836"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Frank Breitinger","raw_affiliation_strings":["Chair for Cybersecurity, University of Augsburg, Augsburg, Germany","Chair for Cybersecurity, University of Augsburg, Germany"],"raw_orcid":"https://orcid.org/0000-0001-5261-4600","affiliations":[{"raw_affiliation_string":"Chair for Cybersecurity, University of Augsburg, Augsburg, Germany","institution_ids":["https://openalex.org/I179225836","https://openalex.org/I142270456"]},{"raw_affiliation_string":"Chair for Cybersecurity, University of Augsburg, Germany","institution_ids":["https://openalex.org/I179225836","https://openalex.org/I142270456"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":11.672,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.98219868,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"6","issue":"4","first_page":"1","last_page":"18"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9940999746322632,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10181","display_name":"Natural Language Processing Techniques","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6187955141067505},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.5528969168663025},{"id":"https://openalex.org/keywords/natural-language-processing","display_name":"Natural language processing","score":0.413545161485672},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1663840413093567}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6187955141067505},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.5528969168663025},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.413545161485672},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1663840413093567}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3748264","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3748264","pdf_url":null,"source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},{"id":"pmh:oai:research.ou.nl:publications/6293a2f7-30ab-4c41-9ac6-1c5019856d95","is_oa":false,"landing_page_url":"https://research.ou.nl/en/publications/6293a2f7-30ab-4c41-9ac6-1c5019856d95","pdf_url":null,"source":{"id":"https://openalex.org/S4406922485","display_name":"Open University of the Netherlands Research Portal","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Michelet, G, Henseler, H, van Beek, H, Scanlon, M & Breitinger, F 2025, 'Fine-Tuning Large Language Models for Digital Forensics: Case Study and General Recommendations', Digital Threats: Research and Practice, vol. 6, no. 4, 21, pp. 1-18. https://doi.org/10.1145/3748264","raw_type":"info:eu-repo/semantics/publishedVersion"}],"best_oa_location":{"id":"doi:10.1145/3748264","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3748264","pdf_url":null,"source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":38,"referenced_works":["https://openalex.org/W2101105183","https://openalex.org/W2936695845","https://openalex.org/W2989743967","https://openalex.org/W3100560913","https://openalex.org/W3168867926","https://openalex.org/W3198147814","https://openalex.org/W3199259836","https://openalex.org/W3201710275","https://openalex.org/W3212150810","https://openalex.org/W3214437934","https://openalex.org/W4224330589","https://openalex.org/W4287887652","https://openalex.org/W4304208854","https://openalex.org/W4365511667","https://openalex.org/W4365816251","https://openalex.org/W4384112107","https://openalex.org/W4385570938","https://openalex.org/W4386942328","https://openalex.org/W4387561528","https://openalex.org/W4387610430","https://openalex.org/W4387880237","https://openalex.org/W4388483128","https://openalex.org/W4388994355","https://openalex.org/W4391766565","https://openalex.org/W4391857513","https://openalex.org/W4392852527","https://openalex.org/W4394947057","https://openalex.org/W4400483378","https://openalex.org/W4400976739","https://openalex.org/W4401306886","https://openalex.org/W4401306979","https://openalex.org/W4402351990","https://openalex.org/W4402672051","https://openalex.org/W4404862247","https://openalex.org/W4407099782","https://openalex.org/W4408047557","https://openalex.org/W4410564946","https://openalex.org/W4411403346"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Large":[0],"Language":[1],"Models":[2],"(LLMs)":[3],"have":[4,27],"rapidly":[5],"gained":[6],"popularity":[7],"in":[8],"various":[9],"fields,":[10],"including":[11],"Digital":[12],"Forensics":[13],"(DF),":[14],"where":[15,79],"they":[16],"offer":[17],"the":[18,74,77,94,98],"potential":[19],"to":[20,61,72,85],"accelerate":[21],"investigative":[22],"processes.":[23],"Although":[24],"several":[25],"studies":[26],"explored":[28],"LLMs":[29,59],"for":[30,43,57],"tasks":[31],"such":[32],"as":[33],"evidence":[34],"identification,":[35],"artifact":[36],"analysis,":[37],"and":[38],"report":[39],"writing,":[40],"fine-tuning":[41,58],"models":[42,84],"specific":[44],"forensic":[45],"applications":[46],"remains":[47],"underexplored.":[48],"This":[49],"article":[50],"addresses":[51],"this":[52],"gap":[53],"by":[54],"proposing":[55],"recommendations":[56],"tailored":[60],"DF":[62],"tasks.":[63],"A":[64],"case":[65,99],"study":[66,90],"on":[67],"chat":[68],"summarization":[69],"is":[70],"presented":[71],"showcase":[73],"applicability":[75],"of":[76],"recommendations,":[78],"us":[80],"evaluate":[81],"multiple":[82],"fine-tuned":[83],"assess":[86],"their":[87],"performance.":[88],"The":[89],"concludes":[91],"with":[92],"sharing":[93],"lessons":[95],"learned":[96],"from":[97],"study.":[100]},"counts_by_year":[{"year":2026,"cited_by_count":5}],"updated_date":"2026-06-13T07:54:00.901334","created_date":"2025-10-10T00:00:00"}