, , , , , , , ,

Becoming a Better Digital Forensics Witness, by Craig Ball, Ball In Your Court Blog


I love to testify—in court, at deposition, in declarations and affidavits—and I even like writing reports about my findings in forensic exams.

I love the challenge—the chance to mix it up with skilled interrogators, defend my opinions and help the decision makers hear what the electronic evidence tells us.  There is a compelling human drama being played out in those bits and bytes, and computer forensic examiners are the fortunate few who get to tell the story.  It’s our privilege to help the finders of fact understand the digital evidence.[1]

This post is written for computer forensic examiners and outlines ways to become a more effective witness and common pitfalls you can avoid.  But the advice offered applies as well to almost anyone who takes the stand. . . .

. . .