<!-- .slide: class="content" --> ## Conclusions * Digital Forensics is actually a rapidly evolving field! * Although rooted in "Best Practice" and "Court Admissibility" * Don't worry about being pragmatic. * Sometimes it is impossible to get the evidence in the traditional way. * We need to be creative to make use of the best evidence we have. * No gatekeeping ! Be inclusive ! --- <!-- .slide: class="content" --> ## Conclusions * Digital forensics is the best we have when preparation is insufficient! * We can do some simple and easy things to improve our forensic preparedness. * Challenge ourselves to preempt the forensic process * Table top exercises * Consider possible investigations * What forensic artifact is **best** to answer our questions?