| <<< Daubert Standard, cont. | Index | The von Neumann Computer Model >>> |
Taking the position of prosecution and law enforcement, consider the computer forensics examiner on the witness stand as an expert witness.
In a case involving file system analysis and examination, procedures that will be scrutinized are those that are used to break the image of one large file system into the smaller components such as files.
Expert's answers regarding what was uncovered must demonstrate the authority and understanding of the file system in question.
The questions from the defense may come up as
"How could you read this media when it shows up on my expert's machine as unreadable?"
"How do you know this file was deleted or if other files were not mixed in with this one?"
The line of questioning is intended to put doubt into the jury or the judge.
| <<< Daubert Standard, cont. | Index | The von Neumann Computer Model >>> |