Recommendation Engine (RecE)

Cybercrime investigators and analysts selecting GANNDALF tools for a case

RecE turns a brief case description into prioritised tool suggestions with clear explanations, helping investigators review their options and choose the tools they need.

Investigators face cases with different objectives, evidence types and practical constraints. Choosing suitable tools from a growing catalogue can take time and requires familiarity with what each tool can do. They need clear suggestions grounded in documented capabilities, with enough explanation to judge whether the proposed tools fit their investigation.

The Recommendation Engine (RecE) takes a brief, non-sensitive investigation description and compares it with the documented capabilities of GANNDALF tools. It returns a prioritised list of suitable tools, with short explanations and references to the supporting documentation. Investigators can accept, reject or change the proposed selection. Designed to support case creation in the GANNDALF Portal, RecE helps users prepare a tool set for their investigation while keeping the final choice under their control.

• Tool suggestions matched to the investigation description
• Prioritised recommendations from the GANNDALF tool catalogue
• Clear explanations linked to supporting documentation
• Investigator control to accept, reject or change suggestions
• Case creation support through the GANNDALF Portal