| <<< chain of custody | Index | first sector of a harddrive >>> |
Once a suspect computer comes into your custody, what would you do to ensure that the chain of custody in not broken?
A Chain of Custody form is the best approach to proving that the chain was not broken.
The CoC form should include such information as a brief description of the item, who has possession of it, and the date/time that they received it.
The form should also have places to note transfer of the evidence from one person to another, including who had it, who is getting it, and dates and times.
| <<< chain of custody | Index | first sector of a harddrive >>> |