You are a computer forensics intern at AAA Computer Forensics, a small forensics investigations and data recovery firm. One of the investigators needs to prepare for a court appearance where she will provide an expert testimony. Your manager asks you to help her prepare. Using the forensic specialist responsibilities, help the investigator prepare for court by acting as the cross examiner in the case. The case involves the following scenario:
Mr. Jim Brown, the owner of Brown Wholesale, has suspected that his assistant, Jim Black, is stealing sensitive company material and selling it to his competitors. Mr. Brown has Mr. Black's laptop and a thumb drive he found taped under his desk. He wants you to examine the computer and the thumb drive.
Write a report that should answer the following questions:
? What case documentation do you need for testimony? Define at least three of them.
? What professional information do you need when providing testimony? Define at least two of them.
? What are the expert testimony guidelines?
? Referring to the scenario above, you will need to create a chain of custody form and fill in the entries from the time you take the laptop and thumb drive from Mr. Brown until the point you return the original evidence to him.