A Practical Guide to Computer Forensics Investigations

Chapter 6. Documenting the Investigation

Learning Outcomes

After reading this chapter, you will be able to understand the following:

Obtaining evidence from a service provider;

Documenting a crime scene;

Seizing evidence;

Documenting and handling evidence;

Forensic tools for documenting an investigation;

Report writing;

The role of an expert ...