Before utilizing an analysis technique on computer evidence, the investigator should:
Be trained in the employment of the technique.
Test the technique on simulated evidence in a controlled environment to confirm that the results are consistent.
Both a and b.
Neither a or b.
Submit