Here is an interesting article written by a lawyer on how to cross examine Forensic Computing ‘Experts’.
Andy
That's a great article, could be retitled "common mistakes of forensics examiners". I don't agree with his thoughts on using a checklist. Every case is different, I don't think you can reduce it to a checklist. The author posts regularly on the Encase bulletin board. He has a lot of knowledge on the subject.
It is an interesting article; it gives me personally an insight into how lawyers think. I couldn't make out if Craig is a defence or prosecution lawyer? (Or even both – don’t know how the US legal system works fully – but in the UK a Barrister can defend and prosecute – and often does - on the same day).
Andy
Many of our prosecutors have experience as defense attorneys and go back to it as well, I guess it pays better, but they can't do defense work while holding the office of prosecutor. The biggest area for growth I believe in computer forensics is on the civil side, which may be very well Craig's specialty.