Digital Forensic Expert Testimony
Forensic experts can be appointed by a federal, state or academic institutions, or hired by a private individual. They may be called upon to be expert witnesses or they may be hired as consultants to contribute their specialized knowledge and advice technical issues. Digital forensic experts may be subpoenaed or be appointed by the court to assist a judge or jury. Weather in a criminal or civil case, to help a criminal defendant, or to provide a third expert opinion on and evidence previously reviewed by the defense experts and prosecution.
Digital forensic experts must come prepared. Thus our experts gather and test evidence and technical information associated to the case they are dealing with. Our experts must follow standard lab protocols and procedures. They proceed step-by-step, in a systematic and logical way, to attain the test results, facts and information on which conclusions are founded.
Once the information is gathered, our expert witnesses develop that information into actual reports that reflect use of the scientific methodology and contain valid documentation. They work with the attorneys / courts who subpoenaed them to focus on the significant issues of the case ensure understanding of technical and legal terminology.
Being prepared and organized helps our expert forensic witnesses during the crucial, and lengthy pretrial discovery process surrounding the matter in dispute.
Generally, our expert digital forensic report is outlined as follows:
Summary of materials;
Inventory of the tools used in the process of investigation. This will include their purpose and any essential assumptions correlated with the assigned tool;
Evidence Item (a) Summary of the evidence found on the media (b) Analysis of relevant segments of the media (i) Email account (ii) Internet search history (iii) USB registry analysis (c) Duplication of above steps for further evidence articles. This may include supplementary media devices; and
Recommendations and next steps for counsel to continue or cease investigation based on the findings in the report
