F301 Digital Evidence First Response

This training contains information and recommendations on internationally accepted forensics approaches for first response and subsequent examinations of devices containing different types of digital evidence. In this training, the relevant legal process and procedural issues are discussed in the stages of search, seizure, protection of the evidence chain, analysis, reporting, submission in the criminal / prosecution / judicial process, evidence evaluation, acceptability value, etc. of the professionals who have a legal basis or authority.
The practices related to the search and seizure of electronic and digital evidence are discussed in detail; It is aimed that information security personnel, law enforcement agencies, prosecutors, lawyers, and expert witnesses have the technical competence to follow the processes applied at the time of the first response. When the processes required for protecting “evidentiary feature” of the evidence are not complied at the time of first response, further investigations on evidence will be affected negatively.