Free
DFIR Investigations and Witness Testimony
Is it time for you to testify? This course is for digital forensics and incident response professionals who are preparing to testify. Learn more about what makes an expert witness, as well as what is involved in the process from collection and analysis to testimony. Gain confidence with defending your work before you take the witness stand!
1
H
50
M
Time
intermediate
difficulty
2
ceu/cpe
Course Content
Course Wrap-Up and Next Steps
Course Review and Next Steps
"Seeking the Truth"
The Role of an Expert Witness
Evidence Identification
Forensic Concept Review
Investigation Planning
Investigative Process
Format of the Expert Report
The Expert Report
US Constitution
The Origins of the American Legal System
Judge vs. Jury Trial
The Trial Process
Federal Rule of Evidence 702
Rules of Evidence and Procedure
Written vs. Oral Testimony
Providing Depositions and Affidavits
Voire Dire of Experts
Expert Testimony
Expert Testimony Do's and Don'ts
Testimony Do’s and Don’ts
Facts vs. Expert Witness
The Role of an Expert Witness
Evidence Preservation
Forensic Concept Review
Investigation Bias
Investigative Process
Importance of Every Word
The Expert Report
Original vs. Appellate Jurisdiction
The Origins of the American Legal System
Anatomy of a Trial
The Trial Process
Federal Rule of Civil Procedure 26
Rules of Evidence and Procedure
Affidavits vs. Declarations
Providing Depositions and Affidavits
Consulting vs. Testifying
Expert Testimony
Evidence Handling and Storage
Forensic Concept Review
Checklists and Standard Procedure
Investigative Process
Drawing Conclusions Revisited
The Expert Report
State Courts and Federalism
The Origins of the American Legal System
Federal Criminal Rule of Procedure 16
Rules of Evidence and Procedure
Course Description
“We need you to testify.” From fear to excitement, nervousness to confidence, the emotions these words evoke can vary. “But I have never testified before.” If this is one of your reactions, then this course is for you.
Prerequisites
Basic understanding of concepts such as evidence handling, chain of custody, trial procedure, and digital forensic investigations.Target audience
Course Goals
By the end of this course, students should be able to:
Instructed by
Instructor
Dustin Sachs
As a recognized expert in the field of cybersecurity, Dustin has run proactive risk assessments, incident response forensics, and worked in security operation centers (CSOCs) to strengthen the security posture for his client and employers and is a trusted partner in the immediate aftermath of cyber events.
Dustin has submitted written and oral testimony in local, state, and Federal courts. He is a frequent thought leader and speaker on a wide variety of cybersecurity matters.
Provider
Certificate of Completion
