Title: 5. Completing the Case
Course: IN 2005 Digital Forensics > Section: Module 2: Chapter 2 - Understanding Computer Investigations

Completing the Case

1. Guidelines on how to write an investigation final report:

- State what you did and what you found
- Show conclusive evidence for proving a suspect guilty or innocent
- You can even include logs from forensic tools to support your points and show every single step you took when investigating the case

1. If by repeating the process described in a report you cannot achieve the same results, that work has no value as evidence.  This characteristic is known as repeatable findings.

1. The final report should be prepared accordingly to the expected readers.

This work is licensed under a “Creative Commons Attribution 4.0 International License”.

Butler is an “Equal Opportunity Employer/Program” and “Auxiliary Aids and Services are available upon request.