Good report writing is an essential skill for every computer forensics professional. Included on this page are links to sample reports and other relevant resources. If you would like to submit a new entry (including articles related to report writing) please do not hesitate to get in touch.

Sample Reports

"Forensic Examination of Digital Evidence: A Guide for Law Enforcement" (PDF file)
Published by the US Department of Justice this guide is intended for use by law enforcement officers and other members of the law enforcement community who are responsible for the examination of digital evidence. It includes sample reports.

"Writing a Computer Forensic Technical Report" (PDF file)
"Writing a Computer Forensic Technical Report" is actually the Appendix of this PDF file (the entire file is titled "Becoming a Forensic Investigator" and is a GCFA Practical submitted by Mark Maher in 2004). The relevant section offers a methodology to ensure a repeatable standard in computer forensic report writing.

"Computer Forensic Investigative Analysis Report (CFIAR)" (MS Word doc)
MS Word doc from www.superhac.com with the following sections: Executive Summary, Initial Incident Discovery, Forensic Process, Results and Findings.

"Expert Technical Report And Findings"
Disklabs sanitized report with the following sections: Background to the case, Remit of the investigation, Case activities, Conclusion, Executive summary, Exhibits submitted for analysis, Analysis results, Examination, Generated material, Generated appendices.

"Computer Forensics Report" (MS Word doc)
MS Word doc from www.theycallusgeeks.com with the following sections: Investigator Information, Case Description, Computer and Forensic Tool Statistics, Investigation, Conclusion.

"Fundamental Computer Investigation Guide For Windows"
The Fundamental Computer Investigation Guide for Windows is a concise collection of processes, tools, and best practice information. It is designed to provide standardized guidance for IT professionals who need to conduct investigations of Microsoft® Windows®–based computers in their organizations. It contains a short sample internal investigation report.

"Honeynet Project Scan of the Month - Scan 24 (October 2002) - Computer Forensics Report"
A report submitted for the Honeynet Project Scan of the Month challenge based on the analysis of a floppy diskette. The report answers specific questions posed by the challenge and is perhaps most useful in that regard rather than in terms of displaying a typical report structure.

Articles

Would you like to submit an article about report writing? Please get in touch!

Links

Got a good link related to writing computer forensics reports? Please get in touch!