ABSTRACT

Conducting an investigation is more than simply supporting the business risk scenarios discussed in Chapter 7. From conducting an investigation, organizations must also be able to provide answers to questions—of who, where, what, when, why, and how—and demonstrate how their digital evidence supports the credibility of these answers.