Testifying about Technical Matters
When all the reports are done and the prosecution has started, there comes a time when you will have to testify regarding your findings. The testimony may be in a suppression hearing (the other side doesn’t want your evidence heard in court), it may be in deposition (the other side wants to know what you know), or it may be testimony in open court before the finder of the facts (judge, jury, and the like). Regardless of the setting or audience, you’ll have to tell a technical story to people who probably don’t understand the underlying technology.
If you try to use technical terms and try to force them to understand the technology, most likely you will fail. The challenge, then, is to take the technical concepts ...
Get Mastering Windows Network Forensics and Investigation, 2nd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
