Latvia, from September 29 till October 7, 2020
INsig2 conducted a 4-day seminar, organized by ERA Academy of European Law in cooperation with the Court Administration of Latvia. A seminars was held for Latvian judges, prosecutors, investigators, and police officers on “Introduction to digital forensics”, in the period from September 29 till October 7, 2020.
The seminar opened with an introduction to digital forensics by covering different terms – digital forensics branches, digital crime, digital forensic cases, etc. Following, different forensic procedures, rules and principles were presented, along with the importance of following these rules when conducting the digital forensic process. We finished with presenting different types of digital evidence – computer, mobile device, external devices, and cloud.
The second day of the seminar started by explaining different types of storage media and how to create a forensic copy and validate tools before their use. Also, the importance of hashing as a method for proving the integrity of the evidence was explained. Following, the topic of digital forensic triage was covered and different open-source, free, and commercial tools were presented. The day finished with discussing different case studies based on these topics.
On the third day, we covered the topics of computer forensics, evidence processing and encryption implications. Our experts described the computer's role in investigations, how to acquire digital evidence, different evidence processing methods and their duration, and implications that encryption presents to forensic investigators.
The last day of the seminar started with writing the final expert’s report and how to prepare yourself for presenting evidence in the court. We continued with various case studies and practical exercises with FTK Imager software. Within the practical exercise, participants experienced how to capture memory, import, and analyze digital evidence.