ABSTRACT
At any time during the forensic investigation workflow, as discussed in Chapter 2, “Investigative Process Methodology,” it may be necessary to obtain legal advice regarding the current state of the case. This advice will provide the investigative team with a level of assurance that either (1) there is credible digital evidence to support legal proceedings or (2) the collected digital evidence does not support factual conclusions about the event(s) or incident(s).
