SOC Wiki Evidence Handling and chain of custody

Evidence Collection and Handling

A critical part of any computer forensic investigation is ensuring proper evidence collection and proper maintenance of the chain of custody of the evidence collected. ¬†You need to be sure that you can identify the who, what, when, where, how, and why of each piece of evidence or material that you collect during the investigation: […]