Criminal Investigations

Investigation of electronic evidence involves searching, interviewing, interrogating, collecting, and preserving evidence. This process starts with planning and concludes with a formal report of the relevant electronic evidence. Electronic evidence must be relevant and handled in a forensically correct manner using proper processes, tools, and chain of custody to ensure authenticity and document the control of the evidence. The criminal investigation process is complex and involves many different processes and techniques that must be studied and practiced before they are mastered.

The tools, technologies, and laws involved in electronic investigations continue to evolve and become more formal and sophisticated. Technical environments and devices involved in digital crimes continue to change and evolve as well and often require or enable the examiner to use new tools and techniques during the investigation process.

References

Charters, I. (2009). The evolution of digital forensics: Civilizing the cyber frontier. http://www.guerilla-ciso.com/wp-content/uploads/2009/01/the-evolution-of-digital-forensics-ian-charters.pdf

Jarrett, H. M., Bailie, M. W., Hagen, E., & Judish, N. (n.d.). Searching and seizing computers and obtaining electronic evidence in criminal investigations. https://www.justice.gov/sites/default/files/criminal-ccips/legacy/2015/01/14/ssmanual2009.pdf