David, AnneMorris, SarahAppleby-Thomas, Gareth J.2021-02-232021-02-232021-02-16David A, Morris S, Appleby-Thomas G. (2021) Social Media User Relationship Framework (SMURF). Journal of Digital Forensics, Security and Law, Volume 16, February 2021, Article number 11558-7215https://doi.org/10.15394/jdfsl.2021.1698http://dspace.lib.cranfield.ac.uk/handle/1826/16392The use of social media has spread through many aspects of society, allowing millions of individuals, corporate as well as government entities to leverage the opportunities it affords. These opportunities often end up being exploited by a small percentage of the user community who use it for objectionable or unlawful activities; for example, trolling, cyber bullying, grooming, luring. In some cases, these unlawful activities result in investigations where swift retrieval of critical evidence required in order to save a life. This paper presents a proof of concept (PoC) framework for social media user attribution. The framework aims to provide digital evidence that can be used to substantiate user activity in live triage investigations. This paper highlights the use of live triage as a viable technique for the investigation of social media activity, contextualizing user activity and attributing actions to users. It discusses the reliability of artefacts other than the communications content as a means of drawing inferences about user social media activity, taking into account the proportionality and relevance of such evidenceenAttribution-NonCommercial 4.0 Internationalhttp://creativecommons.org/licenses/by-nc/4.0/social mediarelationship attributionlive triagedigital investigation frameworkdigital investigationdigital forensicsArticle