Featured AP100 Axiom Digital Evidence Reporting: A Prosecutor's Toolkit

Modules Module 1: Course introduction Meet the instructor and other students; review expectations for the training event. Discuss how digital evidence is viewed in different jurisdictions and common admissibility challenges. Module 2: Foundations of digital forensics & evidence anatomy Foundations and scope of digital forensics. How to articulate components of digital evidence (storage media and hardware considerations). Review case law influencing admissibility. Collaboration with examiners during investigations. Module 3: Search and seizure considerations Legal and practical considerations for searches and seizures. Consent searches vs. search warrants. Drafting search warrants tailored for digital evidence. File hashing: concepts and practical considerations. Module 4: How data is stored How hard drives and SSDs store data (computer and mobile contexts). Partitioning, wear leveling, and TRIM. Module 5: Evidence acquisition & device characteristics Best practices for computer and mobile evidence acquisition. Acquisition/extraction types for computer and mobile devices. Mobile device states. System-level vs. application-specific artifacts. Module 6: Magnet Axiom & the forensic tool marketplace Role of forensic tools in the criminal justice system. How Magnet Axiom Process ingests evidence for analysis in Axiom Examine. Overview of the forensic tool marketplace. Module 7: Computer examinations & common artifacts Key data points for Windows computer examinations. Common Windows artifacts and how they are generated/stored. User activity, application traces, and how they support timelines, behavior reconstruction, and attribution. Module 8: Cloud Role of cloud data in modern forensic investigations. Common sources of cloud evidence (mobile backups, third-party cloud storage). Legal considerations for remote data access (warrants, consent, statutory compliance). Module 9: Mobile device examinations & common artifacts Common artifacts in mobile examinations. How Magnet Axiom reporting features support prosecutorial needs. Portable cases and collaboration features. Module 10: Reporting, validation, and legal strategy Authentication of digital evidence. Potential admissibility challenges. Direct and cross examination prompts. Educating a jury on digital forensic findings.