Every time I am preparing for testimony at deposition or trial, I ask the attorney I am working for whether I should make it “easy” or “hard.” Even very experienced attorneys examining a technical witness often ask the wrong question. In a recent exchange during cross-examination at trial, the issue was whether the opposition’s client had altered a hard drive, rendering it inaccessible by a prior computer forensics expert. The opposition attorney first asked about a particular type of disk encryption. In the follow-up question, the attorney changed the hypothetical and did not specify the supposed encryption mechanism. When he confronted me claiming I had changed my answer, I simply explained that no, he had changed the question. When dealing with technical testimony, seemingly minor details in how the question is asked can alter the answer you receive…
In Which Si and Desi Are Left Unsupervised
The Basics of Forensic Video Recovery with DVR Examiner
Project LOCARD's Pablo Lopez Aguilar on Digital Evidence Management Using the Blockchain of Custody
Important: No API Key Entered.
Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.