Chapter 17. Becoming an Expert Witness
Topics we'll investigate in this chapter:
▪ Understanding the Expert Witness
▪ Testifying As an Expert Witness
Summary
Frequently Asked Questions
Introduction
A cybercrime investigation and building of the case file is aimed toward one end result: obtaining a conviction of the cybercriminal in a court of law. No matter how good the evidence you obtain—log files showing unauthorized access to the network, hard disks seized from the suspect's computer containing clear-cut indications of the criminal activity, network records tracking the intruder back through Internet servers to his or her computer—none of this evidence can stand alone. Under most judicial systems, physical and intangible evidence must be supported ...
Get Scene of the Cybercrime, 2nd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
