physical AND testimonial evidence.

Instructions:

An investigator of an incident scene is looking for physical AND testimonial evidence.

Submission Instructions:

There are a total of six activities that must be addressed. Describe each of these and note the relevance of each.

The six activities or more in some literatures are related to the activities performed by the investigator while looking for evidence. Below are examples (select one of them):

1)  Understanding Evidence

2)  A Common Process Model for Incident Response and Computer Forensics