Mastering Windows Network Forensics and Investigation, 2nd Edition
by Steven Anson, Steve Bunting, Ryan Johnson, Scott Pearson
Testifying about Technical Matters
When all the reports are done and the prosecution has started, there comes a time when you will have to testify regarding your findings. The testimony may be in a suppression hearing (the other side doesn’t want your evidence heard in court), it may be in deposition (the other side wants to know what you know), or it may be testimony in open court before the finder of the facts (judge, jury, and the like). Regardless of the setting or audience, you’ll have to tell a technical story to people who probably don’t understand the underlying technology.
If you try to use technical terms and try to force them to understand the technology, most likely you will fail. The challenge, then, is to take the technical concepts ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access