Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Big Data Forensics: Learning Hadoop Investigations

You're reading from   Big Data Forensics: Learning Hadoop Investigations Perform forensic investigations on Hadoop clusters with cutting-edge tools and techniques

Arrow left icon
Product type Paperback
Published in Aug 2015
Publisher
ISBN-13 9781785288104
Length 264 pages
Edition 1st Edition
Languages
Tools
Concepts
Arrow right icon
Toc

The chain of custody documentation

The chain of custody documentation needs to be established as soon as evidence is collected. If a collection is being performed by in-house staff or a third-party, chain of custody forms should be filled out by the person performing the collection and anyone who takes possession of the evidence. The chain of custody documentation is a chronological history that shows who had possession of the evidence. This is important in both criminal and civil investigations to prove who had access to the evidence and who could have potentially altered the evidence. Every time the evidence is exchanged between two people, the chain of custody documentation should be updated to document when the transfer occurred and who was involved. The following figure is a sample chain of custody document:

The chain of custody documentation

Figure 6: The chain of custody form

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $19.99/month. Cancel anytime
Banner background image