ABSTRACT
This chapter examines many of the situations and circumstances that are the realities of digital forensic practice. A case for a corporate investigator will likely present much differently than a case for a private investigator or law enforcement. The decision to pursue a full investigation can rely on many factors. A criminal case typically works toward a different set of outcomes than a civil case. Criminal cases work to establish guilt or innocence. Criminal cases may involve local, state, or federal law enforcement agencies as well as judges, prosecutors, defense lawyers, witnesses, and expert witnesses. A digital forensic investigator would usually work for a law enforcement agency on the prosecution side – either as an officer or as a civilian investigator. Technical capabilities may be such that the desired information is unattainable. A lot of bright people have made suggestions and contributions that have been a great help.
