Pre-investigation considerationsThe forensic workstationThe response kitForensic softwareForensic investigator trainingUnderstanding case information and legal issuesUnderstanding data acquisition Chain of custodyUnderstanding the analysis processDates and time zonesHash analysisFile signature analysisAntivirusReporting your findingsDetails to include in your reportDocument facts and circumstancesThe report conclusionSummaryQuestionsFurther reading