6. Digital Crime Scene Process

• Preserve the state of the digital crime scene

• When important data is saved in a "live" or "dead" system,

  • the hash should be calculated to show later that the data has not changed.