The Bottom Line
There are plenty of books on computer forensics, but not many that provide the detail and knowledge one needs to actually testify in court. This book provides great coverage of this topic.
Pros
- Niche expertise not covered in other books
- Detailed information for being an expert witness
- Tons of legal detail to guide you
Cons
- Stories and references sometimes digress
Description
- Forensics and incident response is one thing, but this book helps you prepare to testify in court
- Full of details about legal technicalities and ethical guidelines for taking the stand
- Plenty of real-life cases provide examples to back up the concepts and theory discussed
- Describes the roles and qualifications expected of an expert technical witness in a court trial
Guide Review - Book Review: A Guide to Forensic Testimony
There are many books on computer forensics investigations and incident response, but you won't find too many that tell you what you need to know to take the results of those forensic investigations and make it stand up in court. A Guide to Forensic Testimony (The Art and Practice of Presenting Testimony as an Expert Technical Witness) is an excellent book on this subject. Fred Chris Smith and Rebecca Gurley Bace share their knowledge and experience of the legal system and what it takes to make your computer forensic evidence stand up in court and what you need to do to sell yourself as an expert witness and stand up to cross-examination. The book covers a lot of legal technicalities as well as ethical and professional issues.