Digital Evidence

Digital evidence, like any other evidence, must be:

• Admissible

• Authentic

• Precise

• Complete

Requirements

Legally admissible.

• how it is obtained.

Technically irrefutable.

• source

• integrity

• certification (digital signature)

• dual control

Stages

The process of a forensic analysis is divided into four stages:

1. Identify the source of the digital evidence;

2. Preserving the evidence (involves the duplication of evidence according to technical-legal processes);

3. Analysis and investigation of evidence;

4. Presentation of reports and documentation of results.