Site Loader
Rock Street, San Francisco

are 4 evidence lifecycle to investigate the employee’s computer, there are
preparation, evidence collection, preservation, examination and analysis and
presentation. Firstly, the preparation. In the court, as an investigator needs
to declare in which to disturb the evidence seized, thus, to filing seize the
evidence by the authorities that must be collected. (Subramaniam, n.d)


At the
scene, as an investigator should interpret the media description that likely
detected. Furthermore,
to conduct a brief preliminary that can be accomplished with the suitable party.
Deliberately, the preparation phase may contain the responsibilities and
borders installation, and to recommend the client on the impact and the
suggestion that may contain investigation conclusion. (Subramaniam, n.d.) 

We Will Write a Custom Essay Specifically
For You For Only $13.90/page!

order now


evidence lifecycle is evidence collection. Device’s documentation is in the setting
and investigator’s journal should be made. Moreover, the number, the date of
the evidence that be delivered by the label management. Therefore, to interview
with the user of the system that obtain the computer’s IP address, which the
investigation collaboration. Furthermore, to recognize the evidence cause which
hardware and software that be used by the investigator when it’s applicable, forensically
and effective for the evidence breakdown A write-protected manned is acquired
by the evidence which can be achieved The authority need to be used to identify
the software to control the development of the disk acquisition and imaging. To
develop an image of the suspect’s disk can be prepared by the software
especially when the suspect’s disk duplicate. (Subramaniam, n.d.)


The original data has to be completely non-invasive that be used by the
forensic method. At the same time to duplicate files which to ignore the files
and information prosperity. Therefore, to duplicating the copies the files can
be visible as well as it difference from free space which may contains hidden
data, hidden partitions that contains hidden data, slack space, registry info, unallocated
space, temporary files, hidden files, , history files and etc. (Subramaniam,


the examination and analysis is at this stage the result is
depended by the outstanding closing case, prosecution, settlement or conviction.
Additional during this development a due care must be taken and to avoid any
occupied with the original evidence. (Subramaniam, n.d.) 


the presentation, which the findings must be presented simultaneously manner that
may include screen captures, original files and etc. Furthermore, clear
evidence information with the techniques simultaneously. (Subramaniam, n.d.)


admissibility of evidence comes in four basic forms that are demonstrative
evidence, documentary evidence, real evidence and testimonial evidence. First
off demonstrative evidence, with efficiency enough for the task at hand,
correctly and adequately to express testimony and in another way is
unobjectionable and it will be admissible. Examples of demonstrative evidence
are diagram and the scene of an occurrence description. As a result of its
purpose is to clarify testimony, the witness whose testimony is being
illustrated authenticates the demonstrative evidence. (Findlaw, n.d.)


admissibility of evidence is documentary evidence: The method of using document
that is genuine whereas the same as any other real evidence. Moreover, the rule
of evidence most highly contributed of where writing is being offered in
evidence, thus, a copy or the content’s other secondary evidence, which will
not be received in document distribution but the clarification that is offered
for the original insufficiency. (Findlaw, n.d.)


Furthermore, Real evidence: An
action which based on the real evidence to convince the terms and the defendant’s
performance. If it is written in a stumble way, as a result it may be relevant
to be presented. When real evidence that needs to be admissible, it must be
relevant, competent, and material. (Findlaw, n.d.)  


testimonial evidence. To view the problem that were questions of competence
connection and therefore evidence expulsion in which presenting in preference
questions of weight for accomplishment to classify, furthermore, competence
guidelines are interpret and it will be affected in the exclusion of evidence. (Findlaw,

Post Author: admin


I'm Dora!

Would you like to get a custom essay? How about receiving a customized one?

Check it out