Evidence Collection and Forensics
Digital evidence can be used in legal proceedings provided it has been preserved in its original state. Evidence loses its integrity if the chain of custody is not maintained. The chain of custody refers to the process of identifying, preserving, analyzing, and presenting evidence in such a manner that it demonstrates the reliability and integrity of the evidence.
Chain of Custody
The following are some of the major considerations when demonstrating the chain of custody:
Identify
This refers to the practice of the identification of evidence. This process should not impact the evidence’s integrity. Evidence should not be altered or modified in any way.
Preserve
This refers to the process of preserving evidence, such as the imaging of original media. This process should be followed in the presence of an independent third party. The process of preserving evidence should be documented for further reference.
Analyze
This refers...
