Combing Through Crimes: Understanding and Enhancing Search in Hansken

Abstract

Hansken is a powerful digital forensic tool, but its search interface is often experienced as unintuitive and cognitively demanding, leading to less effective search behaviour. This study investigates how Hansken users search for information, how their behaviour aligns with theories of information seeking, and how interface design can better support their needs. An alternative prototype interface was developed through design thinking and a mixed-methods study was performed with Hansken users, combining interviews, think-aloud exercises and a survey. Findings show that Hansken users' information needs vary widely depending on role, organisation, and task. Users often indulge in exploratory search behaviour and rely on contextual information to guide new search directions. Data categorisation and overviews support this behaviour. As a query formulation style, natural language interaction are perceived as an enhancement but trust in AI agents remains low. Insights underline the need for search interfaces that support a broad range of information needs, facilitate categorical groupings of data, and reduce mental effort in query formulation. Design implications include implementing faceted search, offering exploratory and focused search modes, and cautiously integrating natural language interaction with mechanisms for building user trust.