Device and data acquisition guidelines and best practices
While I've tried to give you a general and summarized overview of the procedures when collecting and preserving evidence, there are several official documents that I highly recommend you read and become familiar with, as they all give good details and guidelines on the documentation of the scene, evidence collection, and data acquisition.
SWGDE Best Practices for Digital Evidence Collection, Version 1.0, published in July 2018, outlines the best practices for computer forensics in the following areas:
- Evidence collection and handling
- Documentation
The full SWGDE best practices for computer forensics document can be downloaded from https://www.swgde.org/documents/Current%20Documents/SWGDE%20Best%20Practices%20for%20Digital%20Evidence%20Collection.
The SWGDE Best Practices for Computer Forensics Acquisitions document, version 1.0, released in April 2018, provides guidelines on evidence collection...
