The documented process of tracking digital evidence from collection through analysis and presentation, maintaining its integrity and admissibility. A proper chain of custody records who handled the evidence, when, and what was done with it.
Related Terms
Digital Forensics
incident-responseThe process of collecting, preserving, analyzing, and presenting digital evidence from computers, networks, and storage...
Incident Response Plan
incident-responseA documented set of procedures for detecting, responding to, and recovering from security incidents. An effective plan i...