1. Read the text and write out the words describing the principle and procedure of Documenting and Reporting (e.g. accurately, ongoing…)

2. Illustrate the meanings of these words in your own sentences.

3. Make up the lists of their synonyms and antonyms.

4. Rewrite the list of general considerations that may assist the examiner throughout the documentation process using sentences with modal verbs instead of imperative mood and write it in the form of a business letter to the branches according to the recommendations given below:

TEXT 4

Read the text and remember the format of the document.

Examiner's report

This section provides guidance in preparing the report that will be submitted to the inves­tigator, prosecutor, and others. These are general suggestions; departmental policy may dictate report writing specifics, such as its order and contents. The report may include:

1. Identity of the reporting agency.

2. Case identifier or submission number.

3. Case investigator.

4. Identity of the submitter.

5. Date of receipt.

6. Date of report.

7. Descriptive list of items submitted for examination, including serial number, make, and model.

8. Identity and signature of the examiner.

9. Brief description of steps taken during examination, such as string searches, graphics image searches, and recovering erased files.

10. Results/conclusions.

The following sections have been found to be useful in other report formats.

Summary of findings

This section may consist of a brief summary of the results of the examinations per­formed on the items submitted for analysis. All findings listed in the summary should also be contained in the details of findings section of the report.

Details of findings

This section should describe in greater detail the results of the examinations and may include:

1. Specific files related to the request.

2. Other files, including deleted files, that support the findings.

3. String searches, keyword searches, and text string searches.

4. Internet-related evidence, such as Web site traffic analysis, chat logs, cache files, e-mail, and news group activity.

5. Graphic image analysis.

6. Indicators of ownership, which could include program registration data.

7. Data analysis.

8. Description of relevant programs on the examined items.

9. Techniques used to hide or mask data, such as encryption, steganography, hidden attrib­utes, hidden partitions, and file name anomalies.

Supporting materials

List supporting materials that are included with the report, such as printouts of particu­lar items of evidence, digital copies of evidence, and chain of custody documentation.

Glossary

A glossary may be included with the report to assist the reader in understanding any tech­nical terms used. Use a generally accepted source for the definition of the terms and include appropriate references.

TEXT 5

Analyze the case using the above information:

Case brief 1 report memorandum

FOR: County Sheriff's Police Investigator Johnson Anytown, USA 01234

SUBJECT: Forensic Media Analysis Report SUBJECT: DOE, JOHN Case Number: 012345

1. Status: Closed.

2. Summary of Findings:

■ 327 files containing images of what appeared to be children depicted in a sexually explicit manner were recovered.

^■ 34 shortcut files that pointed to files on floppy disks with sexually explicit file names involving children were recovered.