Almost every case now contains an aspect of digital evidence. Digital evidence often comes from multiple sources, such as computers, mobile devices, IoT, and data from cyberspace. Prosecutors routinely receive investigative reports containing the results of computer forensic examinations or mobile device extractions. Understanding the critical evidence from those devices, including how to introduce digital evidence in court, is essential to a successful prosecution. This presentation breaks down the complex topics of computer forensic examination and mobile device extractions into simple, mentally digestible parts. The presenter will explain core functions from digital device examinations and methods to introduce digital artifacts at trial.
Learning Objectives:
Learn the key functions of a computer forensic examination
Learn the important aspects of a digital device examination
Gain an understanding of the functionality of specific digital artifacts from computers and mobile devices and learn the proper steps to authenticate them at trial
