Computer forensics report provides detailed information on complete computer forensics
investigation process. It should explain how the incident occurred, provide technical details of the
incident and should be clear to understand. Which of the following attributes of a forensics report
can render it inadmissible in a court of law?
A.
It includes metadata about the incident
B.
It includes relevant extracts referred to In the report that support analysis or conclusions
C.
It is based on logical assumptions about the incident timeline
D.
It maintains a single document style throughout the text