Hands-on Incident Response and Digital Forensics

15 REPORTING AND PRESENTING YOUR FINDINGS

There is an art to taking deeply technical topics, such as those encountered during a digital forensics investigation, and crafting a document that can explain them to an audience that might not be so technically inclined. This is precisely what a digital forensic investigator must do as a final, yet critical, step in the investigative process. Although report production is typically reserved for once an investigation has reached its conclusion, the reporting process starts much earlier. Throughout an investigation the investigator should be making notes to track actions taken and findings alike. It is during the reporting phase that these notes will be at their most useful, as they help us to recall ...