Creating a report

Overview

• The purpose of a forensic examination is to identify evidence, or lack thereof, and produce a forensic report. In this video lecture I discuss how to add new evidence and bookmarks to case, and how to create a report in multiple formats.

 

Timeline:

1. Creating new bookmarks                               2:00

2. Creating the report                                       14:11 

 

Video:

• Creating a report in FTK

 

Resources

• Sample forensic image (Check Falcon Online)