paraphrasing

Applying the Daubert Standard to Forensic Evidence

Introduction

One legal standard that is key to forensics and too often overlooked in forensic books is the Daubert standard. This standard is used by a trial judge to make a preliminary assessment of whether an expert's scientific testimony is based on reasoning and methodology that is scientifically valid and can properly be applied to the facts at issue. Under .

This lab has five parts which should be completed in the order specified.

1. In the first part of this lab you will review the search warrant and complete a Chain of Custody form for the evidence seized.

2. In the second part of the lab you will use FTK Imager tool to create hash codes for any suspicious files.

3. In the third part of the lab you will validate the MD5 hash codes for this suspicious files using EnCase Imager tool.

4. In the fourth part of this lab you will validate the MD5 hash codes for this suspicious files using P2 Commander tool.

Conclusion

Upon completing this lab,we will be able to:

· Prepare evidence for court and complete forms used in evidence handling

· Understand how a judge will determine evidence using the Daubert standards

· Create MD5 hash files using FTK Imager

· Validate FTK Imager hashing using EnCase Imager

· Validate FTK Imager hashing using P2 Commander