| <<< office computer examination, cont. | Index | chain of custody >>> |
Prior to dismantling the system, take pictures of the equipment and the area
Label all connections to allow identical reassemble when the system is back in the lab.
Look for any connections that are not "normal" -- a security dongle.
The system needs to be fully documented -- as it exists in the office, not in generic way.
All equipment should be placed into some secure container for transport
Each piece of equipment inventoried (model numbers and serial numbers are particularly important), and chain-of-custody paperwork initiated.
| <<< office computer examination, cont. | Index | chain of custody >>> |