
282 䡲 Cyber Forensics Field Manual, Second Edition
Outline of an Investigation
e fi rst place to begin is by determining what is the goal of the investigation? Is the goal to enforce
policy; bring legal action against a current or former employee or third-party contractor; participate
in a civil investigation; or in support of an ongoing or pending criminal investigation?
In determining the ultimate goal of an investigation, the investigator may have to depend on a third
party to provide that specifi c reason. Initially, there may not be a clear violation or indication of wrong
doing, which would immediately indicate or signal that the investigation ...