From the course: Learning Cyber Incident Response and Digital Forensics

Unlock this course with a free trial

Join today to access over 24,700 courses taught by industry experts.

Best practices

Best practices

- [Instructor] In this lesson, we're going to discuss some best practices for conducting your digital forensic investigations. Now, to ensure that the original evidence is not altered, and still is admissible in court, the forensic examiner needs to have specific standards, and rules for conducting their examinations. The forensic examiner must strictly observe all legal restrictions on their investigations, and as much as possible, not examine the original media, and instead use a bit by bit copy known as an image. Now, most digital forensic examiners will observe these best practices that we're about to go over when conducting their digital forensic investigations to ensure they keep their collected evidence credible and accurate. First, let's talk about seizing evidence during an investigation. As a forensic examiner, you need to ensure that you're consulting with the investigations officer to…

Contents