This chapter is from the book
This chapter is from the book
This chapter is from the book
15.8 Reporting
When our analysis was complete, we began to draft a report. This is another critical step in the computer forensic process, and we wanted to make sure we got it right.
We met with the lead investigators and attorneys and provided them verbal reports of the results of our analysis, as well as our working papers. We had been working together, so they were aware of the findings for the most part, but a presentation still had to be made to ensure that there were no misunderstandings. In addition, though we had a report format (template) that we were comfortable with, we needed to know how the report should be labeled (e.g., confidential, sensitive, privileged, attorney/client privileged). This is an important consideration, that, in general, is best left to the lawyers.
We agreed to develop our report using Microsoft Word and to include links to pertinent files that would be stored on an accompanying CD-ROM. All the attorney would need to do is insert the CD in a computer, and the report would automatically open for viewing. The attorney could then easily review the report and choose to open any associated files she wished to view.
The report, as well as all data and work papers, would be on the CD-ROM. The written report could certainly be printed in hard copy; the sheer volume of the data, however, made hard copies of the data completely impossible.