Reporting your findings
We are at the final step of the process: your report. You did all the work of preparing, purchasing the equipment, going to training, and creating your response kit and when the call came, you responded to the scene. When you arrive, you successfully get the case information and navigate any potential legal issues. You collect the volatile data, identify containers of digital evidence, and duly seize the digital evidence while maintaining the chain of custody when transporting it back to your lab. You then conduct your analysis and find artifacts that show that the suspect did or did not do what they were accused of.Â
Now what? You have to be able to explain your findings to a non-technical person. You have to take a very technical topic and talk about it in a manner that a non-technical person will understand. This is one of the hardest aspects of being a digital forensic investigator to master. You may have to create different versions...