Which technique best helps an investigator communicate complex forensic timelines to a non-technical jury or board?
-
A
Presenting raw log files with highlighted rows
-
B
Using visual timeline charts with plain-language annotations
-
C
Reading hexadecimal data aloud from the forensic report
-
D
Submitting only the FTK case file for review