Documenting is not a final step, but is essentially done throughout the investigation at all stages of investigation and processing digital evidence. Documentation showing evidence in its original state is regularly used to demonstrate that it is authentic and unaltered.
Documentation includes.
- Software used and Version Numbers.
- Collection tools.
- Methods used.
- Explanation of why this analysis.
Court Presentation.
- The Discovery process
- Checklists, notes, comments, email, etc.
- Chain of Custody
- Business Attire.
- Ask for questions to be repeated.
- Give your attorney a chance to object.
- Review your notes before court
- Always use your notes to answer questions.
No comments:
Post a Comment