{"id":"https://openalex.org/W7139055155","doi":"https://doi.org/10.1145/3785318.3785330","title":"Structured Report Generation using Local LLMs for Chat-Based Digital Forensics","display_name":"Structured Report Generation using Local LLMs for Chat-Based Digital Forensics","publication_year":2026,"publication_date":"2026-03-20","ids":{"openalex":"https://openalex.org/W7139055155","doi":"https://doi.org/10.1145/3785318.3785330"},"language":"en","primary_location":{"id":"doi:10.1145/3785318.3785330","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3785318.3785330","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Digital Forensics Doctoral Symposium","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3785318.3785330","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5129832126","display_name":"Ying Dehing","orcid":null},"institutions":[{"id":"https://openalex.org/I4210135670","display_name":"Amsterdam University of the Arts","ror":"https://ror.org/04dde1554","country_code":"NL","type":"education","lineage":["https://openalex.org/I4210135670"]},{"id":"https://openalex.org/I887064364","display_name":"University of Amsterdam","ror":"https://ror.org/04dkp9463","country_code":"NL","type":"education","lineage":["https://openalex.org/I887064364"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Ying Dehing","raw_affiliation_strings":["University of Amsterdam, Amsterdam, Netherlands"],"raw_orcid":"https://orcid.org/0009-0009-3568-4303","affiliations":[{"raw_affiliation_string":"University of Amsterdam, Amsterdam, Netherlands","institution_ids":["https://openalex.org/I4210135670","https://openalex.org/I887064364"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060543873","display_name":"Hans Henseler","orcid":"https://orcid.org/0009-0009-2810-442X"},"institutions":[{"id":"https://openalex.org/I121797337","display_name":"Leiden University","ror":"https://ror.org/027bh9e22","country_code":"NL","type":"education","lineage":["https://openalex.org/I121797337"]},{"id":"https://openalex.org/I158244335","display_name":"Netherlands Forensic Institute","ror":"https://ror.org/04s2z4291","country_code":"NL","type":"facility","lineage":["https://openalex.org/I158244335"]},{"id":"https://openalex.org/I210716285","display_name":"University of Applied Sciences Leiden","ror":"https://ror.org/0093src13","country_code":"NL","type":"education","lineage":["https://openalex.org/I210716285"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Hans Henseler","raw_affiliation_strings":["Leiden University of Applied Sciences, Leiden, Netherlands and Netherlands Forensic Institute, The Hague, Netherlands"],"raw_orcid":"https://orcid.org/0009-0009-2810-442X","affiliations":[{"raw_affiliation_string":"Leiden University of Applied Sciences, Leiden, Netherlands and Netherlands Forensic Institute, The Hague, Netherlands","institution_ids":["https://openalex.org/I121797337","https://openalex.org/I158244335","https://openalex.org/I210716285"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130021552","display_name":"Timo Meconi","orcid":null},"institutions":[{"id":"https://openalex.org/I169381384","display_name":"University of Groningen","ror":"https://ror.org/012p63287","country_code":"NL","type":"education","lineage":["https://openalex.org/I169381384"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Timo Meconi","raw_affiliation_strings":["University of Groningen, Groningen, Netherlands"],"raw_orcid":"https://orcid.org/0009-0003-5289-4157","affiliations":[{"raw_affiliation_string":"University of Groningen, Groningen, Netherlands","institution_ids":["https://openalex.org/I169381384"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070684680","display_name":"Marcel Worring","orcid":"https://orcid.org/0000-0003-4097-4136"},"institutions":[{"id":"https://openalex.org/I4210135670","display_name":"Amsterdam University of the Arts","ror":"https://ror.org/04dde1554","country_code":"NL","type":"education","lineage":["https://openalex.org/I4210135670"]},{"id":"https://openalex.org/I887064364","display_name":"University of Amsterdam","ror":"https://ror.org/04dkp9463","country_code":"NL","type":"education","lineage":["https://openalex.org/I887064364"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Marcel Worring","raw_affiliation_strings":["University of Amsterdam, Amsterdam, Netherlands"],"raw_orcid":"https://orcid.org/0000-0003-4097-4136","affiliations":[{"raw_affiliation_string":"University of Amsterdam, Amsterdam, Netherlands","institution_ids":["https://openalex.org/I4210135670","https://openalex.org/I887064364"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5129883986","display_name":"Harm van Beek","orcid":null},"institutions":[{"id":"https://openalex.org/I7876267","display_name":"Open University of the Netherlands","ror":"https://ror.org/018dfmf50","country_code":"NL","type":"education","lineage":["https://openalex.org/I7876267"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Harm van Beek","raw_affiliation_strings":["Open University, Heerlen, Netherlands and Netherlands Forensic Institute, The Hague, Netherlands"],"raw_orcid":"https://orcid.org/0000-0002-6128-5201","affiliations":[{"raw_affiliation_string":"Open University, Heerlen, Netherlands and Netherlands Forensic Institute, The Hague, Netherlands","institution_ids":["https://openalex.org/I7876267"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.24314346,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"11"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.5163999795913696,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.5163999795913696,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12380","display_name":"Authorship Attribution and Profiling","score":0.1379999965429306,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.07530000060796738,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.4837999939918518},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.33469998836517334},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.2793000042438507},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.2460000067949295}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5105000138282776},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.4837999939918518},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4422999918460846},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.33469998836517334},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.29269999265670776},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2793000042438507},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.2770000100135803},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2750999927520752},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.2460000067949295},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2386000007390976}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3785318.3785330","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3785318.3785330","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Digital Forensics Doctoral Symposium","raw_type":"proceedings-article"},{"id":"pmh:oai:pure.rug.nl:publications/5c303ed1-fc37-4b08-850b-d47dac528d90","is_oa":true,"landing_page_url":"https://research.rug.nl/en/publications/5c303ed1-fc37-4b08-850b-d47dac528d90","pdf_url":"https://research.rug.nl/files/1537974128/Structured_Report_Generation_using_Local_LLMs_for_Chat-Based_Digital_Forensics.pdf","source":{"id":"https://openalex.org/S4306400420","display_name":"University of Groningen research database (University of Groningen / Centre for Information Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I169381384","host_organization_name":"University of Groningen","host_organization_lineage":["https://openalex.org/I169381384"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Dehing, Y, Henseler, H, Meconi, T, Worring, M & Van Beek, H 2026, Structured Report Generation using Local LLMs for Chat-Based Digital Forensics. in Proceedings of the 2nd Digital Forensics Doctoral Symposium, DFDS 2026, held as part of the 13th Digital Forensics Research Conference Europe, DFRWS EU 2026., 6, Association for Computing Machinery, Inc, pp. 1-11, 2nd Digital Forensics Doctoral Symposium, DFDS 2026, Linkoping, Sweden, 24/03/2026. https://doi.org/10.1145/3785318.3785330","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:pure.rug.nl:openaire_cris_publications/5c303ed1-fc37-4b08-850b-d47dac528d90","is_oa":true,"landing_page_url":"https://hdl.handle.net/11370/5c303ed1-fc37-4b08-850b-d47dac528d90","pdf_url":null,"source":{"id":"https://openalex.org/S4306400420","display_name":"University of Groningen research database (University of Groningen / Centre for Information Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I169381384","host_organization_name":"University of Groningen","host_organization_lineage":["https://openalex.org/I169381384"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Dehing, Y, Henseler, H, Meconi, T, Worring, M & Van Beek, H 2026, Structured Report Generation using Local LLMs for Chat-Based Digital Forensics. in Proceedings of the 2nd Digital Forensics Doctoral Symposium, DFDS 2026, held as part of the 13th Digital Forensics Research Conference Europe, DFRWS EU 2026., 6, Association for Computing Machinery, Inc, pp. 1-11, 2nd Digital Forensics Doctoral Symposium, DFDS 2026, Linkoping, Sweden, 24/03/2026. https://doi.org/10.1145/3785318.3785330","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:research.ou.nl:publications/a18b0556-770f-4590-aa83-b39f386a05c6","is_oa":true,"landing_page_url":"https://research.ou.nl/en/publications/a18b0556-770f-4590-aa83-b39f386a05c6","pdf_url":null,"source":{"id":"https://openalex.org/S4306401002","display_name":"DSpace (Open University in the Netherlands)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I7876267","host_organization_name":"Open University of the Netherlands","host_organization_lineage":["https://openalex.org/I7876267"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Dehing, Y, Henseler, H, Meconi, T, Worring, M & van Beek, H 2026, Structured Report Generation using Local LLMs for Chat-Based Digital Forensics. in DFDS '26: Proceedings of the Digital Forensics Doctoral Symposium., 6, Association for Computing Machinery (ACM). https://doi.org/10.1145/3785318.3785330","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"doi:10.1145/3785318.3785330","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3785318.3785330","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Digital Forensics Doctoral Symposium","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W1446195290","https://openalex.org/W1967185460","https://openalex.org/W4383498532","https://openalex.org/W4387610430","https://openalex.org/W4392852527","https://openalex.org/W4399439184","https://openalex.org/W4400113208","https://openalex.org/W4403073397","https://openalex.org/W4404501103","https://openalex.org/W4404515032","https://openalex.org/W4407099782","https://openalex.org/W4407163436","https://openalex.org/W4408774828","https://openalex.org/W4410823901","https://openalex.org/W4412627879"],"related_works":[],"abstract_inverted_index":{"Chat":[0],"conversations":[1,48,128],"are":[2,108,150],"an":[3],"essential":[4],"data":[5],"source":[6],"in":[7,37,74,129,183,192,241],"forensic":[8],"investigations.":[9],"With":[10],"the":[11,80,104,111,126,158,168],"number":[12],"of":[13,69,82,96,160,167],"chat":[14,47,92,214],"messages":[15],"sent":[16],"and":[17,45,57,185,195,211,227,234],"received":[18],"on":[19,65],"a":[20,117,153,242],"daily":[21],"basis,":[22],"manually":[23],"analysing":[24],"all":[25],"these":[26,148],"chats":[27],"is":[28,77,237],"very":[29],"time-consuming":[30],"if":[31],"not":[32],"impossible.":[33],"Growing":[34],"interest":[35],"exists":[36],"leveraging":[38],"Large":[39],"Language":[40],"Models":[41],"(LLMs)":[42],"to":[43,49,62,78,86,102,141],"structure":[44,212],"interpret":[46],"support":[50],"investigators":[51],"with":[52,134,164],"finding":[53],"relevant":[54],"messages.":[55],"Privacy":[56],"transparency":[58],"requirements":[59],"force":[60],"LLMs":[61,85,140,178,202],"run":[63],"locally,":[64],"hardware":[66],"under":[67,216],"control":[68],"investigative":[70,89,232],"authorities.":[71],"Our":[72,198],"goal":[73],"this":[75,97],"paper":[76],"evaluate":[79],"feasibility":[81],"using":[83],"local":[84,139,162,177,201],"create":[87,142],"structured":[88],"reports":[90],"from":[91],"corpora.":[93],"The":[94],"results":[95],"study":[98],"will":[99],"be":[100,223,229],"used":[101,230],"improve":[103],"copilot":[105],"that":[106,176],"we":[107,124,137],"developing":[109],"for":[110,231],"Hansken":[112],"DFaaS":[113],"platform.":[114],"We":[115,156],"adopt":[116],"two-stage":[118],"prompting":[119],"framework.":[120],"In":[121,145],"stage":[122,146],"1,":[123],"split":[125],"long":[127],"processable":[130],"parts":[131],"and,":[132],"combined":[133,151],"case":[135,243],"information,":[136],"use":[138],"case-specific":[143],"summaries.":[144],"2,":[147],"summaries":[149],"into":[152],"single":[154],"report.":[155,244],"compare":[157],"outcome":[159],"five":[161],"models":[163],"ground-truth":[165],"output":[166],"cloud":[169],"model":[170],"Gemini":[171],"2.5":[172],"Pro.":[173],"Results":[174],"indicate":[175],"can":[179,207],"achieve":[180],"useful":[181],"performance":[182],"entity":[184],"role":[186],"extraction,":[187],"but":[188],"still":[189],"exhibit":[190],"gaps":[191],"strict":[193,217],"citations":[194],"chronological":[196],"consistency.":[197],"findings":[199],"position":[200],"as":[203,225],"triage":[204],"tools:":[205],"they":[206],"accelerate":[208],"lead":[209],"discovery":[210],"large":[213],"corpora":[215],"privacy":[218],"constraints.":[219],"Their":[220],"outputs":[221],"must":[222],"treated":[224],"provisional":[226],"should":[228],"purposes":[233],"explicit":[235],"validation":[236],"required":[238],"before":[239],"inclusion":[240]},"counts_by_year":[],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2026-03-20T00:00:00"}