Sorting Insiders From Co-Workers: Remote Synchronous Computer-Mediated Triage for Investigating Insider Attacks.
Coral J DandoPaul J TaylorTarek MenacereThomas C OrmerodLinden J BallAlexandra L SandhamPublished in: Human factors (2022)
InSort is appropriate for application by non-specialist investigators and can be quickly altered as a function of both environment and event. InSort offers a clearly defined, well specified, approach for use across insider incidents, and highlights the potential of technology for supporting complex time critical investigations.