Chapter 12 – Report Writing

Criminal and civil investigations involving the mobile forensic processing of evidence will, usually, always require a complete and thorough report. The mobile forensic methodology should consistently remain the same, even when examiners must use a variety of programs, tools, and equipment that may not initially be designed for forensic acquisitions. Following the format of reporting that involves who, what, when, where, and how will ensure that all aspects of the process are clearly articulated for anyone to understand. Key components of how contamination was prevented, what legal process was applied, where artifacts were located, who performed the processing, and what tools were used are examples of how these keywords would be used in the reporting process. The creation of an archive disk will allow for anyone to replicate your process. Lastly, and very importantly, what method of validation was used to confirm the finding must be included within the report?