Digital Forensics Report Writing Flashcard

Front

Why is it important to clearly and concisely present evidence in reports?

Back

To support further investigation or arrest

Front

What is a key consideration when deciding what to include in a report?

Back

The technological understanding of the audience

Front

Which of the following is a recommended component of a report structure?

Back

Summary

Front

Which section of a report provides detailed information and analysis?

Back

Body of the Report

Front

What is the role of forensic software in report generation?

Back

To report what evidence was found and where

Front

What is the best way to establish knowledge on the part of the computer user?

Back

Examining the system registry files (NTUSER.DAT)

Front

Which file list is mentioned as a potential item of evidence?

Back

Most Recently Used (MRU) file lists

Front

What can assist in establishing knowledge besides examining registry files?

Back

Looking at file date properties

Front

Why is it important to communicate with the case investigator regarding seized evidence?

Back

To determine the relevance of the evidence

Front

What type of information is considered time sensitive during an investigation?

Back

Email addresses