incident-response

Chain of Custody

The documented process of tracking digital evidence from collection through analysis and presentation, maintaining its integrity and admissibility. A proper chain of custody records who handled the evidence, when, and what was done with it.