An uncertified + expert report with incomplete methodology can be easily refuted.
Certificate check
- CHFI, EnCE, GCFE, CCE, OSCP.
- If uncertified, qualification is questionable.
Methodology control
- Version of the tool used (FTK, Encase).
- Is the hash chain complete?
- Has RAM analysis been done?
Mathematical error
- The statistics may be hidden.
- Correlation = error of cause.
- False positive rate.
Frequently asked
How is the parallel expert report?
The defense requests; If the court rejects, Constitutional Court remedy.
Expert cross-examination in court?
Yes; methodology + alternative interpretation is asked.
Notification in case of reporting errors?
Judge + prosecutor's office + expert professional discipline.
Relevant legislation
- TCK art.243 — Entering the information system (1-3 years + criminal money).
- TCK Article 244 — Preventing/disrupting system operation (1-5 years).
- TCK art.245 — Bank/credit card fraud (3-6 years).
- TCK art.158/1-f — Qualified fraud when the information system/bank/credit institution is the tool (3-10 years).
- CMK article 134 — Computer search, copying, seizure.
Legal notice: This article is for general information purposes; A meeting with a lawyer is required for a concrete case.