There are a variety of different reasons to conduct an investigation, each with different requirements as to the standard of evidence. In addition to the standard, there is also a burden on the investigator to present the evidence in different ways for each environment.
In this section, you will learn how to differentiate between best, corroborative, and indirect evidence. You will be able to describe why these are, and are not, useful to the investigator.
In general society, forensics relates to the preparation of criminal proceedings. Indeed, public investigations – resolved in a court of law – is also an important category of digital forensic work. Public investigations do not necessarily have to be in the public domain; this term refers to the idea of independent judgment.
Investigations can also be held privately – normally regarding...