Articles
Your thinking and approach are dangerousl and fundamentally flawed if they are tool-centric when performing collections, analysis, and investigations. Tools simply assist the investigator by expediting a process or helping interpret the data. As investigators we cannot simply trust in a tool’s resulting information without validation, verification, and comparison to another method or tool’s result. Our professional duty is to know how things that assist our job function work at a very technical level. This is not required in many other professions.
Digital forensics and computer investigations have a basis in scientific methodology that we need to accept and understand to perform our job and ultimately explain our findings. This requires a level of skepticism and objective thinking that is in direct conflict to having blind trust of the claims made by others, the manufacturer or by a developer as to the authenticity of the results produced.
From: You’re a tool, a digital forensics tool. by Douglas Brush in SANS Computer Forensic Investigations and Incident Response Blog

