Reporting and presentation
Throughout this chapter and the entire book, you will have referred to various steps, screenshots, and even several best practices from ENISA, ACPO, and the SWGDE. It's of the utmost importance to document all the steps in an investigation, not only to be able to recreate and verify your results but also to present your findings within a formal report that may be used in court.
In a professional and unbiased manner, your findings must be presented in layman's terms that can be understood by non-technical persons, such as lawyers, managers, businesspersons, accountants, and others who may not be familiar with forensic processes and terms in any way whatsoever.
Here are some links that may be useful in creating and presenting your findings in a report:
- Intro to Report Writing for Digital Forensics: https://www.sans.org/blog/intro-to-report-writing-for-digital-forensics/
- NIST 800-86, Guide to Computer and Network Data Analysis: https...
