Attribution

In a forensic context, attribution is the process of linking digital evidence or actions to a specific individual or entity. Investigators use clues such as metadata, user account info, document ownership, and activity logs to “attribute” an action to an individual​.