Free
DFIR Investigations and Witness Testimony
Is it time for you to testify? This course is for digital forensics and incident response professionals who are preparing to testify. Learn more about what makes an expert witness, as well as what is involved in the process from collection and analysis to testimony. Gain confidence with defending your work before you take the witness stand!
1
H
50
M
Time
intermediate
difficulty
2
ceu/cpe
Course Content
Checklists and Standard Procedure
Investigative Process
Cross Examination
Expert Testimony
State and Local Rules
Rules of Evidence and Procedure
The Importance of Peer Review
The Expert Report
Drawing Conclusions
Investigative Process
Chain of Custody
Forensic Concept Review
Redirect Examination
Expert Testimony
Work Product Doctrine
Rules of Evidence and Procedure
Supplemental Reports
The Expert Report
Examination Notes and Analysis Documentation
Forensic Concept Review
Course Description
“We need you to testify.” From fear to excitement, nervousness to confidence, the emotions these words evoke can vary. “But I have never testified before.” If this is one of your reactions, then this course is for you.
Prerequisites
Basic understanding of concepts such as evidence handling, chain of custody, trial procedure, and digital forensic investigations.Target audience
Course Goals
By the end of this course, students should be able to:
Instructed by
Instructor
Dustin Sachs
As a recognized expert in the field of cybersecurity, Dustin has run proactive risk assessments, incident response forensics, and worked in security operation centers (CSOCs) to strengthen the security posture for his client and employers and is a trusted partner in the immediate aftermath of cyber events.
Dustin has submitted written and oral testimony in local, state, and Federal courts. He is a frequent thought leader and speaker on a wide variety of cybersecurity matters.
Provider
Certificate of Completion
