ABSTRACT

Forensics is the application of the scientific process to answer a question. For digital forensics to be an accepted science, it has to apply the scientific method. e scientific method is the application of a set of accepted and verifiable steps to investigate a question or problem. e digital forensic process needs to include a thorough enough review to confirm findings, and it should not overlook artifacts that may discredit the findings. In other words, the investigator needs to follow due diligence and review all facts, not just the facts that produce a desired result. In many instances, the forensic review will be performed for one party and the same evidence will undergo a similar review for an opposing party. If the investigator produces inaccurate results, this will likely surface when the results from the two opposing parties come together in court or some other forum. One method to help solidify results is to have a second set of eyes review the results before they are finalized. Similarly, the forensic results from the opposing team should be reviewed by you to verify the results. As Ronald Reagan used to say, “Doveryai, no proveryai,” or “Trust but verify.”