Reference no: EM133855924

Question

Digital forensics investigations require a high level of preparation in order to create a strong and robust case. Investigators must first determine the possible items that will be examined or seized. This is due to the possibility of a high number of electronic devices in the area to be searched and not all of these devices being able to be examined due to time constraints and relevance to the case (André Årnes, 2017). Investigators also need to prepare for the volatility of evidence, as many pieces of evidence may only exist for an extremely short period of time and will require immediate acquisition (André Arnes, 2017).

Before arriving on-scene, the investigators will need to prepare the proper equipment to perform on-site forensics. Some devices may not be included on a search warrant but can be examined through the use of consent. Investigators should have a device with them and plenty of external storage to accommodate other devices. Investigators should also receive high levels of training in the software and hardware that they will utilize.

The most important approach is to the investigation is to make sure that all investigators that take part in any investigation have the proper tools and training to ensure a thorough investigation is performed. It is also important to have policies in procedure in place to outline how a proper investigation needs to be performed. This then standardizes the process leading to less variations in investigative quality. Poor planning could result in investigators not being able to properly identify what items will be of interest to the investigation. This could result in time loss in an already time-constrained investigation.