Analyzing Data and Writing Reports

This chapter describes the actual examinationExamination process and the general demands for a forensic examinationExamination. A basic rule is that the results presented in a forensic examinationExamination must be objective and true. Digital forensicsDigital forensics is comparable to academic work in this manner. This chapter discusses key concepts used to ensure that the results of a forensic examinationExamination meet those demands and discusses the concepts of being unbiasedUnbiased and producing reproducibleReproducible results. The final target of any examinationExamination is to provide answers to some questions or requests. This chapter ends with a discussion on reportingReporting and includes a scale that can be used to grade the strength of the conclusions drawn during the examinationExamination. As it is of great importance that a forensic report is interpreted the same way no matter who the reader is, using a common scale is of great help. Further, this chapter aims to provide the reader with an understanding of the key elements in the forensic processForensic Process.