As being a forensics investigator there are actually certain techniques that really must be adopted and utilized when executing any investigation. The very first in which is the fact that procedure that is employed has to be documented and should be adopted every time! This may stop being highlighted enough as being a defense lawyer will rip regarding a method and in case that attorney learns how the investigator deviates then they begins shredding the case prior to any evidence as well as results has been described. No longer is definitely the equipment that examiners use becoming questioned. It is now more prevalent to find out the defense legal representative query possibly the approach from the investigation if not the practice from the investigator. They would like to know what method was followed and what provides the examiner the authority to perform investigation. Sure, the simple truth is that this information should be acquired within a forensically audio method chain of custody, sincerity of information, details purchase without changing the info, and the listing continues on.
 Nevertheless, it is not necessarily generally the examiner who does the acquiring, so will pinpoint the method once the examiner is provided with the hard generate or any other media that contains the evidence and the particular method that ought to be implemented. The very first thing, and possibly it is important, that has to be completed when starting an investigation is trying to keep notes and suitable documentation. Men and women can only bear in mind stuff for such a long time and circumstances take a long time to prosecute. The chances of an examiner recalling all the essential information that relates to a case if it ultimately lands in court are very less likely. Aside from that, nevertheless the notices can also be used as evidence that could be distributed to the justice and the defense which can lead to an agreement out of judge by using a confession or plea offer from your defense!
As soon as the evidence is received, whether or not it was provided from the email or personally decreased off, the examiner needs to produce a sequence of custody kind. The date and time needs to be saved and also what was acquired, the situation if was acquired in, and go here for information. Other things to make a note of will be the adjustments from the media obtained. This may be jumper options on a hard drive, diskettes have got a swap for locking mechanism and uncover about them, some thumb drives have sealing systems. Basically all those configurations need to be recorded as if anything at all adjustments so you make any modifications then you needs to be in a position to state the reasons you created individuals adjustments. Like you taken out the jumper that produced hard push a primary hard disk and also you transferred it to make it a slave therefore you could put it in the exam unit. That was an actual change that would have to be made and you have to declare that a big change is made.