Differentiate between direct, documentary, and testimonial evidence in digital forensics.

Problem Statement

Explanation

• **Direct evidence** directly links the suspect to a crime (e.g., an email admitting data theft). • **Documentary evidence** includes logs, screenshots, or captured files supporting an event. • **Testimonial evidence** comes from statements made by witnesses or experts. Combining all three provides stronger investigative conclusions.

Practice Sets

This question appears in the following practice sets:

Forensics & Evidence

Next Question

Master Interviews
Anywhere, Anytime

Differentiate between direct, documentary, and testimonial evidence in digital forensics.

Problem Statement

Explanation

Practice Sets

Related Questions

What does Incident Response primarily refer to?

According to the NIST framework, which of the following is NOT an IR phase?

The main goal of Incident Response is to:

What distinguishes a 'security event' from a 'security incident'?

What is the main responsibility of a CSIRT?

More from Incident Response

Master Interviews Anywhere, Anytime

Differentiate between direct, documentary, and testimonial evidence in digital forensics.

Problem Statement

Explanation

Practice Sets

Related Questions

What does Incident Response primarily refer to?

According to the NIST framework, which of the following is NOT an IR phase?

The main goal of Incident Response is to:

What distinguishes a 'security event' from a 'security incident'?

What is the main responsibility of a CSIRT?

More from Incident Response

Master Interviews
Anywhere, Anytime