Forensic Report Writing

Bruce Pixley has authored a new book, which is used as the student manual in computer forensic courses taught by the CA Department of Justice. The classes ars geared for law enforcement officers assigned as computer forensic examiners who are tasked with writing an expert witness report and may be called to testify in trial.

Section 1: Why Are We Here?

This section helps lay the foundation of expert witness report writing. It demonstrates the difference between electronic discovery productions and writing an expert forensic report. The forensic report not only contains the basics that should be in any report, but also the expert’s opinions, which are based on factual objective findings.

Section 2: Starting Your Analysis

There are many ways to start the analysis and this section provides some structure to help quickly triage the analysis. By “walking the path,” the examiner can quickly pick up on how a person used the computer, which provides direction for follow-up analysis. Use of virtual environment software, such as VMware, can be an extremely valuable aid during the analysis and for providing a demonstrative exhibit.

Section 3: Case Study

To help prepare for the report writing section, a sample case study is provided. This case walks through potentially relevant information that was discovered through the forensic analysis. Screenshots are used throughout the study to help provide a visual depiction and bring the case to life.

Section 4: Writing Your Report

A sample format of an expert witness report is provided as a roadmap to prepare the expert report. The report writing process is completed by using the information from the case study.

Section 5: Inside The Courtroom

At some point in the forensic examiner’s career, the examiner may be called upon to testify in court. This section provides some helpful insight as to what to expect during trial and the types of questions may be asked during cross-examination.