Subject: Digital Forensics

Topic: Initial response and forensic duplication

Difficulty: Medium

Admissible

Must be able to be used in court or elsewhere

Authentic

Evidence relates to incident in relevant way

Complete (no tunnel vision)

Exculpatory evidence for alternative suspects

Reliable

No question about authenticity & veracity

Believable

Clear, easy to understand, and believable by a jury