Template 4: Investigative Final Report
Document History
Table of Contents
[Description of the incident, including when it occurred, how it was detected, who identified it, where it took place, what happened, and who authorized the investigation]
[Summarize the significant findings of the investigation]
[Establish conclusions from the investigative findings and provide expert opinions where/when needed]
[Details describing where evidence was identified, techniques used to seize it, methods used to transport it to a secure location, and its continuous custody records]
[Methodologies, tools, and equipment used to collect and preserve digital evidence]
[Methodologies, tools, and equipment used to perform examination of digital evidence]
[Details describing the meaningful, relevant, and factual findings from the analysis of digital evidence]
[Details of professional references used during the investigation to validate and/or verify findings]
[Definition of technical terms, phrases, or words used throughout the final report]