Chapter 17. Becoming an Expert Witness
Topics we'll investigate in this chapter:
▪ Understanding the Expert Witness
▪ Testifying As an Expert Witness
Frequently Asked Questions
A cybercrime investigation and building of the case file is aimed toward one end result: obtaining a conviction of the cybercriminal in a court of law. No matter how good the evidence you obtain—log files showing unauthorized access to the network, hard disks seized from the suspect's computer containing clear-cut indications of the criminal activity, network records tracking the intruder back through Internet servers to his or her computer—none of this evidence can stand alone. Under most judicial systems, physical and intangible evidence must be supported ...