Reflection
The Expert Witness Digital Forensics Report is an excellent exercise in gaining an understanding of what it takes to have proper chain of custody in gathering, handling digital evidence, performing digital forensics to recover deleted files, encrypted and steganographic files, hidden files, evidence that will be useful to present to the court of law. For the Search and Seizure of evidence, a request was filed for legal authorities to enter the victim’s residence to search the victim’s computer, the attached devices, and cell phone. Another request was filed under 18 U.S.C. § 2703(d) for legal authorities to search for computer sessions linked to the victim’s computer and the perpetrators’ computer and geolocations obtained from the Internet Service Provider and web-based email service provider. The warrants were issued for the search and seizure of devices and computer sessions of internet activity which may be analyzed and serve as digital evidence, in order to try and determine the events that led up to her suicide and try to bring the perpetrators to justice. The Forensic Toolkit Imager, aka FTK Imager, is an amazing technology. It is used to recover deleted files confiscated from victim’s computer. I learned to present the findings in an evidentiary report.