Cyber Crime and forensics
M4 Readings Required Readings Text: Nelson, Phillips, and Steuart. Guide to
Computer Forensics and Investigations Chapter 14: Report Writing for High-Tech
Investigations Chapter 15: Expert Testimony in High-Tech Investigations Text:
Casey Chapter 4: Cybercrime Law Online Readings Technical Report Writing SANS
Digital Forensics and Incident Response Blog | Intro to Report Writing for Digital
Forensics | SANS Institute SANS Institute (2004). Becoming a Forensic
Investigator: Writing a Computer Forensic Technical Report National Institute of
Justice (guidance and examples on reports, evidence presentation, subpoenas)
National Institute of Justice. (2007). Digital Evidence in the Courtroom: A Guide for
Law Enforcement and Prosecutors- pages 39-52 Chapter 4: Presentation of
Digital Evidence National Institute of Justice. (2007). Investigations Involving the
Internet and Computer Networks- pages 95-106 Appendix E: Sample Subpoenas
and Reports Optional Readings CCIPS Criminal Division. (2009). Searching &
Seizing Computers and Obtaining Electronic Evidence in Criminal Investigations,
Third Edition. complete manual as PD Zucker, S. (2007). Cyber Forensics: Part 1.
NCSTL.org (National Clearinghouse for Science, Technology and the Law at
Stetson University College of Law): Gulfport, FL. Communicating Technical
Information "Unless the court orders otherwise, an expert may state an opinion —
and give the reasons for it — without first testifying to the underlying facts or data.
But the expert may be required to disclose those facts or data on cross-
examination" (Rule 705, Federal Rules of Evidence). Even the most brilliant
analysis can become useless (or worse - detrimental) to a case if those making
decisions about the facts cannot understand them. A forensic report needs to
document the facts and explain them clearly and concisely. Forensic reports need
to be written so that they: Accurately describe the details of an incident Are
understandable to decision-makers Can withstand a barrage of legal scrutiny Are
unambiguous and not open to misinterpretation Are easily referenced Contain all
information required to explain your conclusions Offer valid conclusions, opinions
or recommendations when needed Are created in a timely manner Assist your case
(Prostise & Mandia, 2003, p. 452) Testimonies in court, as a technical/scientific
witness or as an expert witness, require the ability to clearly state the facts.
Explanations and descriptions need to be phrased so that they are understandable
and free of technical jargon: keep in mind that your audience will be non-technical.
For the discussion, you will be examining a real court case of your choice and
evaluating the clarity of the forensic evidence presented. Module 4 two fictional
figures using tin cans to communicate Image by Peggy und Marco Lachmann-Anke
from Pixabay Communicating Technical Information The Value of Communication
(Weeks 8 and 9) In this module we will look at how to communicate technical
information effectively. Testimonies in court, as a technical/scientific witness or as
an expert witness, require the ability to clearly state the facts. Explanations and
descriptions need to be phrased so that they are understandable and free of
technical jargon. Module Objectives You will be able to: clearly express fact versus
M4 Readings Required Readings Text: Nelson, Phillips, and Steuart. Guide to
Computer Forensics and Investigations Chapter 14: Report Writing for High-Tech
Investigations Chapter 15: Expert Testimony in High-Tech Investigations Text:
Casey Chapter 4: Cybercrime Law Online Readings Technical Report Writing SANS
Digital Forensics and Incident Response Blog | Intro to Report Writing for Digital
Forensics | SANS Institute SANS Institute (2004). Becoming a Forensic
Investigator: Writing a Computer Forensic Technical Report National Institute of
Justice (guidance and examples on reports, evidence presentation, subpoenas)
National Institute of Justice. (2007). Digital Evidence in the Courtroom: A Guide for
Law Enforcement and Prosecutors- pages 39-52 Chapter 4: Presentation of
Digital Evidence National Institute of Justice. (2007). Investigations Involving the
Internet and Computer Networks- pages 95-106 Appendix E: Sample Subpoenas
and Reports Optional Readings CCIPS Criminal Division. (2009). Searching &
Seizing Computers and Obtaining Electronic Evidence in Criminal Investigations,
Third Edition. complete manual as PD Zucker, S. (2007). Cyber Forensics: Part 1.
NCSTL.org (National Clearinghouse for Science, Technology and the Law at
Stetson University College of Law): Gulfport, FL. Communicating Technical
Information "Unless the court orders otherwise, an expert may state an opinion —
and give the reasons for it — without first testifying to the underlying facts or data.
But the expert may be required to disclose those facts or data on cross-
examination" (Rule 705, Federal Rules of Evidence). Even the most brilliant
analysis can become useless (or worse - detrimental) to a case if those making
decisions about the facts cannot understand them. A forensic report needs to
document the facts and explain them clearly and concisely. Forensic reports need
to be written so that they: Accurately describe the details of an incident Are
understandable to decision-makers Can withstand a barrage of legal scrutiny Are
unambiguous and not open to misinterpretation Are easily referenced Contain all
information required to explain your conclusions Offer valid conclusions, opinions
or recommendations when needed Are created in a timely manner Assist your case
(Prostise & Mandia, 2003, p. 452) Testimonies in court, as a technical/scientific
witness or as an expert witness, require the ability to clearly state the facts.
Explanations and descriptions need to be phrased so that they are understandable
and free of technical jargon: keep in mind that your audience will be non-technical.
For the discussion, you will be examining a real court case of your choice and
evaluating the clarity of the forensic evidence presented. Module 4 two fictional
figures using tin cans to communicate Image by Peggy und Marco Lachmann-Anke
from Pixabay Communicating Technical Information The Value of Communication
(Weeks 8 and 9) In this module we will look at how to communicate technical
information effectively. Testimonies in court, as a technical/scientific witness or as
an expert witness, require the ability to clearly state the facts. Explanations and
descriptions need to be phrased so that they are understandable and free of
technical jargon. Module Objectives You will be able to: clearly express fact versus
