From the course: Learning Cyber Incident Response and Digital Forensics
Unlock this course with a free trial
Join today to access over 24,700 courses taught by industry experts.
Best practices
From the course: Learning Cyber Incident Response and Digital Forensics
Best practices
- [Instructor] In this lesson, we're going to discuss some best practices for conducting your digital forensic investigations. Now, to ensure that the original evidence is not altered, and still is admissible in court, the forensic examiner needs to have specific standards, and rules for conducting their examinations. The forensic examiner must strictly observe all legal restrictions on their investigations, and as much as possible, not examine the original media, and instead use a bit by bit copy known as an image. Now, most digital forensic examiners will observe these best practices that we're about to go over when conducting their digital forensic investigations to ensure they keep their collected evidence credible and accurate. First, let's talk about seizing evidence during an investigation. As a forensic examiner, you need to ensure that you're consulting with the investigations officer to…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.