At any time during the forensic investigation workflow, as discussed in Chapter 2, “Investigative Process Methodology,” it may be necessary to obtain legal advice regarding the current state of the case. This advice will provide the investigative team with a level of assurance that either (1) there is credible digital evidence to support legal proceedings or (2) the collected digital evidence does not support factual conclusions about the event(s) or incident(s).
Where the legal team determines that the strength of existing digital evidence is adequate, the investigation has met the criteria for progressing into formal legal proceedings. However, where the legal team determines that strength of existing ...
Get Implementing Digital Forensic Readiness, 2nd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
