The recovery and forensic analysis of digital evidence and its ultimate presentation in court is no different than that of other forensic exhibits. It requires the best forensic standards and expects practitioners to possess special skills, notably:
The ability to undertake impartial, unbiased, and through examinations of the evidence
Possessing and adhering to a strong ethical code
A modicum of sound forensic examination experience
Having access to other practitioners to cross-pollinate
Being widely read on digital forensic practices and case studies
Having access to the best forensic tools and possessing a high level of competence in their use and deployment
Possessing sufficient understanding of relevant legislation
Recognizing the limitations of their competence and signaling the need for specialist support
The ability to understand client needs and define the nature of the examination at an early stage and, if necessary, on an ongoing basis
Being a sound communicator...