2. Introduction to Investigative Report
An investigative report is a report that
provides detailed information on the
complete forensic inves-
tigation process
4. Guidelines for Writing a Report
• Write opinions that are based on knowledge
and experience.
• Create a logical structure from beginning to
end.
• Try to avoid hypothetical questions.
• Apply theoretical questions to guide and
support opinions based on the factual evidence.
• Avoid using repetitive and vague language.
• Use a simple format so the report can be easily
passed from one person to another.
5. Guidelines for Writing a Report
• Group associated ideas and sentences into
paragraphs and later into sections.
• Do not use slang words, specialist language
(which is not understood by the average
person), and colloquial terms (which creates the
effect of conversation).
• If any abbreviations or acronyms are used,
define and explain them in detail.
• After completing the report, check the
grammar, vocabulary, punctuation, and spelling.
6. Guidelines for Writing a Report
• Always use the active voice when writing a
report so that the communication looks direct
and straightforward.
• Write the report in a concise manner so that it
is easily understandable and interesting to any
audience.
• Write everything with proper validation.
• Never mention any clues in the report.
• Avoid writing many details and personal
observations in the report.
7. Use of Supporting Material
The investigator can reference the
supporting material directly in the text.
The points that the supporting material
makes are integrated into the writing to
enhance the impact. It is advisable to
number figures and tables in the same
order as they are introduced in the report.
8. Importance of Consistency
- Abstract or summary
- Table of contents
- Body of report
- Conclusions
- References
- Glossary
- Acknowledgments
9. Salient Features of a Good Report
- Method explanations
- Data collection
- Calculations
- Uncertainty and error analysis
- Results explanations
- Discussion of results and conclusions
- References
- Appendices
- Acknowledgments
10. Collecting Physical and
Demonstrative Evidence
The following information should be collected for physical
and demonstrative evidence:
• The manner in which the scene of the incident was
secured
• A list of each type of physical evidence that was
collected and secured
• The manner in which the physical evidence was
collected and logged
• The manner in which the physical evidence was
preserved after collection to maintain the chain of custody
• A list of any pictures that were taken
• A list of any demonstrative evidence available to the
investigation
11. Collecting Testimonial Evidence
The following information should be collected for
testimonial evidence:
• The manner in which the investigator determined
whom to interview
• A list of the persons interviewed in chronological
order, including the name, title, date, and time of
each interview
• A list of persons who are identified as the targets of
the case
• The manner in which the investigator afforded the
target or the witnesses any right to representation
12. Case Report Writing and
Documentation
This report should have the following documents:
• Forms
• Analysis notes
• Items that come as a result of analysis, i.e.,
printouts and CDs
• Copies of search warrants
• Evidence listing
• Media analysis worksheet
• Keyword lists
• Support requests
13. Creating a Report to Attach to the
Media Analysis Worksheet
An investigator should maintain notes and provide
more information on the following to create a report
that can be attached to the media analysis
worksheet:
• Date and time when any computer taken as
evidence
• Current date and time
• Lapses in analysis
• Finding evidence
• Special techniques required that are beyond the
normal processes
• Significant problems or broken items
14. Best Practices for Investigators
Before submitting the final report, an
investigator should read it over to see if there
are any places where he or she needs to
make changes.
