Free
DFIR Investigations and Witness Testimony
Is it time for you to testify? This course is for digital forensics and incident response professionals who are preparing to testify. Learn more about what makes an expert witness, as well as what is involved in the process from collection and analysis to testimony. Gain confidence with defending your work before you take the witness stand!
1
H
50
M
Time
intermediate
difficulty
2
ceu/cpe
Course Content
Expert Testimony Do's and Don'ts
Testimony Do’s and Don’ts
Redirect Examination
Expert Testimony
Cross Examination
Expert Testimony
Direct Examination
Expert Testimony
Consulting vs. Testifying
Expert Testimony
Voire Dire of Experts
Expert Testimony
Affidavits vs. Declarations
Providing Depositions and Affidavits
Written vs. Oral Testimony
Providing Depositions and Affidavits
Work Product Doctrine
Rules of Evidence and Procedure
State and Local Rules
Rules of Evidence and Procedure
Federal Criminal Rule of Procedure 16
Rules of Evidence and Procedure
Federal Rule of Civil Procedure 26
Rules of Evidence and Procedure
Federal Rule of Evidence 702
Rules of Evidence and Procedure
Anatomy of a Trial
The Trial Process
Judge vs. Jury Trial
The Trial Process
State Courts and Federalism
The Origins of the American Legal System
Original vs. Appellate Jurisdiction
The Origins of the American Legal System
US Constitution
The Origins of the American Legal System
Supplemental Reports
The Expert Report
The Importance of Peer Review
The Expert Report
Drawing Conclusions Revisited
The Expert Report
Importance of Every Word
The Expert Report
Format of the Expert Report
The Expert Report
Drawing Conclusions
Investigative Process
Checklists and Standard Procedure
Investigative Process
Course Description
“We need you to testify.” From fear to excitement, nervousness to confidence, the emotions these words evoke can vary. “But I have never testified before.” If this is one of your reactions, then this course is for you.
Prerequisites
Basic understanding of concepts such as evidence handling, chain of custody, trial procedure, and digital forensic investigations.Target audience
Course Goals
By the end of this course, students should be able to:
Instructed by
Instructor
Dustin Sachs
As a recognized expert in the field of cybersecurity, Dustin has run proactive risk assessments, incident response forensics, and worked in security operation centers (CSOCs) to strengthen the security posture for his client and employers and is a trusted partner in the immediate aftermath of cyber events.
Dustin has submitted written and oral testimony in local, state, and Federal courts. He is a frequent thought leader and speaker on a wide variety of cybersecurity matters.
Provider
Certificate of Completion
