Free
DFIR Investigations and Witness Testimony
Is it time for you to testify? This course is for digital forensics and incident response professionals who are preparing to testify. Learn more about what makes an expert witness, as well as what is involved in the process from collection and analysis to testimony. Gain confidence with defending your work before you take the witness stand!
1
H
50
M
Time
intermediate
difficulty
2
ceu/cpe
Course Content
The Role of an Expert Witness
"Seeking the Truth"
The Role of an Expert Witness
Facts vs. Expert Witness
The Role of an Expert Witness
Forensic Concept Review
Evidence Identification
Forensic Concept Review
Evidence Preservation
Forensic Concept Review
Evidence Handling and Storage
Forensic Concept Review
Investigative Process
Investigation Planning
Investigative Process
Investigation Bias
Investigative Process
The Expert Report
Format of the Expert Report
The Expert Report
Importance of Every Word
The Expert Report
Drawing Conclusions Revisited
The Expert Report
The Origins of the American Legal System
US Constitution
The Origins of the American Legal System
Original vs. Appellate Jurisdiction
The Origins of the American Legal System
State Courts and Federalism
The Origins of the American Legal System
Rules of Evidence and Procedure
Federal Rule of Evidence 702
Rules of Evidence and Procedure
Federal Rule of Civil Procedure 26
Rules of Evidence and Procedure
Federal Criminal Rule of Procedure 16
Rules of Evidence and Procedure
Providing Depositions and Affidavits
Written vs. Oral Testimony
Providing Depositions and Affidavits
Affidavits vs. Declarations
Providing Depositions and Affidavits
Course Description
“We need you to testify.” From fear to excitement, nervousness to confidence, the emotions these words evoke can vary. “But I have never testified before.” If this is one of your reactions, then this course is for you.
Prerequisites
Basic understanding of concepts such as evidence handling, chain of custody, trial procedure, and digital forensic investigations.Target audience
Course Goals
By the end of this course, students should be able to:
Instructed by
Instructor
Dustin Sachs
As a recognized expert in the field of cybersecurity, Dustin has run proactive risk assessments, incident response forensics, and worked in security operation centers (CSOCs) to strengthen the security posture for his client and employers and is a trusted partner in the immediate aftermath of cyber events.
Dustin has submitted written and oral testimony in local, state, and Federal courts. He is a frequent thought leader and speaker on a wide variety of cybersecurity matters.
Provider
Certificate of Completion
