| <<< Pitfalls, cont. | Index | Transportation >>> |
Independent component doctrine: digital investigators should collect only hardware "for which they can articulate an independent basis for search or seizure:
the component itself is a contraband, an instrumentality, or an evidence of a crime.
Collection of all peripheral hardware like printers and tape drives is important.
Printouts and papers that could be associated with the computer should be collected.
Evidence tape should be put around the main components of the computer -- to warn people not to use the computer.
Date/time and investigator initials should be written on each piece of evidence and on the evidence tape.
| <<< Pitfalls, cont. | Index | Transportation >>> |