Chapter 17. Becoming an Expert Witness

Topics we'll investigate in this chapter:

▪ Understanding the Expert Witness
▪ Testifying As an Expert Witness
Summary
Frequently Asked Questions

Introduction

A cybercrime investigation and building of the case file is aimed toward one end result: obtaining a conviction of the cybercriminal in a court of law. No matter how good the evidence you obtain—log files showing unauthorized access to the network, hard disks seized from the suspect's computer containing clear-cut indications of the criminal activity, network records tracking the intruder back through Internet servers to his or her computer—none of this evidence can stand alone. Under most judicial systems, physical and intangible evidence must be supported ...

Get Scene of the Cybercrime, 2nd Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.