Abstract

When one has finished gathering the data from an incident of intrusion, one should put all the analysis together into a report. One should format the report for its intended audience; the report for internal review will be formatted differently than the report for use in a civil or criminal case. This chapter discusses the components of a final report on digital forensic investigation. The company, legal staff, and possibly the district attorney would use the report in different ways. Therefore, an investigator must include all the details regarding the information gathered in response to the incident. This includes the names and titles of all the people, as well as the data, affidavits, and other relevant information one has collected. In addition, one must keep track of all the procedures and policies one used and followed during data collection, investigation and analysis to ensure that his or her data-gathering techniques are up to par and that the report is as complete and accurate as possible.

Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call