Presenting Technical Evidence in Court
summary
Focuses on the concrete rules that win or lose cases: make a bit-for-bit image using hardware write‑blockers, keep a sealed original and a working copy, document every handoff for the chain of custody, and avoid ordinary backups that flip archive bits and invalidate evidence. Notes a local murder prosecution thrown out after illegally seized data, explains hearsay and admissibility traps, and warns preparation often takes days to produce minutes of courtroom testimony.
AI-written summary · about
chapters (14)
- 0:00Introduction and speaker background
- 2:02Legal systems and their impact
- 8:47Types of laws and jurisdictions
- 15:27Liability and negligence concepts
- 17:36The crypto wars and legal battles
- 19:00Types of evidence in court
- 25:25Rules for admissible digital evidence
- 29:19Privacy and surveillance laws
- 31:53Adversarial system and discovery
- 34:01Handling digital evidence and chain of custody
- 36:50Witness roles and expert testimony
- 38:57Preparing technical presentations for court
- 41:49The CSI effect on legal expectations
- 43:11Closing remarks and Q&A
related talks
52mExperts May Decide if You Are a Hero or Will Wear Orange
01h 20mBeyond the Encryption Debate
53mForensics Skillset: Techniques for Extraction and Analysis of the Evidence
44mWhen the Cops Come A-Knocking: Handling Technical Assistance Demands from Law Enforcement
46mDigital Forensics – The Importance of Forensic Triage Images
10mLightning Talk: Challenges in Cloud Native Forensics
52mUnderstanding the Role of Cybersecurity Expert Witnesses
32mExplore Adventures in the Underland: Forensic Techniques against Hackers