Computer forensics report provides detailed information on complete computer forensics investigation
process. It should explain how the incident occurred, provide technical details of the incident and should
be clear to understand. Which of the following attributes of a forensics report can render it inadmissible
in a court of law?
A.
It is based on logical assumptions about the incident timeline
B.
It includes relevant extracts referred to In the report that support analysis or conclusions
C.
It includes metadata about the incident
D.
It maintains a single document style throughout the text