Forensic investigation Essay Example | Topics and Well Written Essays - 3250 words

Forensic investigation - Essay Example Despite this, forensic examiners have to go through many steps to get the valuable information from digital evidence without contaminating it. Therefore, Forensic examiner should have well defined manual that help them to understand the process and procedure that should be followed in order to avoid committing any mistake while they are dealing with the evidence. By protecting the evidences, the examiner builds a strong case and avoids dismissal of the case in the court. Challenges such as lack of sufficient research materials are encountered in the project. Despite this, the available material are sufficient to brainstorm on in order to realize the formation of a manual that will help a great deal in improving digital evidence testing in forensic laboratory. In the preparation of the manual, various contents of the entire project are taken into consideration. In the accreditation of any forensic lab under ISO 17025, the lab should have reliable manual and other facilities to ensure its tests results are reliable. For this to be achieved, the various steps involved in laboratory testing must be clearly outlined in a well understandable manner to ensure that they do not raise any ambiguity. In UAE, there is no international or national stander for manual, which can be used in Digital Forensic Lab. This has necessitated the conduction of such researches. The manual include the process that the examiner should follow when he receives case: check the investigator need, document everything about the case, fill chain of the custody, resized the evidence, and store it, make verification of tools and software. In addition, it analyzes images for the original hard drive by using different software and checks the MD5,... The paper tells that each Digital Forensic Laboratory should have a manual that the examiner can use to be able to handle the digital evidence without causing damage or alteration to the original evidence so that Court cases are rejected based on provision of insufficient digital evidence. The entire process of preparing forensic evidence includes protection, recognition, extraction, understanding, and documentation for computer evidence. To make it a success, examinations in digital forensic need some method and technique to collect the information from the evidence, software, or tools for acquisition and analysis, and protection of the digital device that is used as evidence in a court of law. Lab should create manual for technical procedure, examination, and verification. This has brought forward the need for preparing of a standard manual for use by various forensic investigation laboratories. In the investigations, the original evidence availed should not be altered under any co nditions. This ensures that the evidence provided is able to hold in the proceedings of the cases. To many people, their perspective is that the examiner should carry out his examination using the evidence itself. Contrary to this, the examiner should work on the image not on the original evidence and should protect the original evidence while he is doing the image so the original is not damaged or altered. Therefore, guidelines should be established for the examiner to be able to know how to receive, process, document, and handle evidence and work products associated with the examination.