Interviewing for Digital Forensic Investigations

Interviewing for Digital Forensic Investigations

Table of Contents

Introduction…………………………………………………………………..4

What is an interview………………………….……………………………...4

Interview vs Interrogation……………………………………………….…...5

Interview Preparation………………………………………………………...6

Actual Interview………………………………………………………….…..9

Conclusion…………………………………………………..………………12

References…………………………………………..………………………13

Abstract

This paper is written to provide assistance to investigators when they are performing interviews with persons of interest. The guidelines set forth are not all encompassing by any means and they need to be adjusted as the situation dictates. It would be impossible to cover all situations in this paper therefore the topics will be discussed in general terms. Topics discussed in this writing will include what is an interview, why we interview people, the difference between an interview and an interrogation, how to set up for an interview, things to look for during the interview, paperwork to bring with you during the interview, and what not to do during an interview. The paper will also include sample forms the investigator may want to use to assist with the interview and the documentation of evidence. With these tools in mind an investigator should be able to conduct a profitable interview and obtain more insight for the investigation.

Interviewing for Digital Forensic Investigations

Introduction

When conducting an investigation it is very important to gather as many facts as possible so that when a conclusion is reached it will be the most logical application of the facts and leave little room for interpretation. While gathering physical evidence is very important, statements from those involved can be equally as important. These statements can assist in establishing everyone involved, where the idea for the incident was developed, who developed the idea, when the incident occurred, and why the incident occurred. With these issues in mind the question becomes how you get the people involved to give you the information you are looking for, and the answer to that is conducting an interview.

What is an interview?

        Before you can conduct an interview you must know what it is and what it is not. According to Webster’s Dictionary and interview is “1. a formal consultation usually to evaluate qualifications (as of a prospective student or employee) 2a. A meeting at which information is obtained (as by a reporter, television commentator, or pollster) from a person b: a report or reproduction of information so obtained” ("Websters," n.d., p. 1). For our purposes, we will be concentrating on the second definition of the word. We are interested in setting up a face to face meeting with a person in order to gather information. You will be asking questions in order to solicit responses from that person. You want the person to talk, so the manner in which you conduct the interview and the questions you ask are very important. The way the interview is conducted is also important. Try to control the interview environment and take your time. Do not rush the interview. Remember, the person you are interviewing may know more about the facts of the incident that you know. They may have details that you are not aware of and those details are what you need. Also remember if the person is just a witness, they may actually not know much about the incident and you do not want to give them information they did not already know. So now that we know what an interview is, let us discuss the difference between an interview and an interrogation.