Chang is collecting data related to an incident and wishes to investigate a report submitted by an end user. What digital forensics approach is frequently used when end users play a significant role in the initial incident report?

Despite the emphasis on the digital aspect of digital forensics, interviews with end users and other individuals involved in an incident can be a crucial component of a forensic inquiry. While investigators still need to gather information and document their findings, an interview can provide direct knowledge and supplementary information that may not be retrievable through technical methods such as email or disk forensics. A chain of custody does not offer any insight into reports submitted by end users.