Lecture 9 - Process Of Digital Forensics Step 4

Question 1

What is the 4th step of computer forensics?

Answer 1

Writing and presenting a report.

Question 2

What should the report contain?

Answer 2

• Job Description and Instructions
• Description of recovered/examined items
• Analysis of methodology
• Production list and associated description

REPORT SHOULD NOT BE BIASED!

Question 3

What should the investigator be prepared to do after the report is filed?

Answer 3

prepare to testify if needed in
court

Question 4

Should a specific structure of the report be followed?

Answer 4

In the report a specific structure should be followed and all evidence should be referenced and presenting with not any personal opinions emerging