O'Reilly logo

EnCE EnCase Computer Forensics: The Official EnCase Certified Examiner Study Guide, 3rd Edition by Steve Bunting

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Handling Evidence at the Scene

In this section, I’ll cover the various aspects of handling evidence at the scene. I’ll begin with securing the scene. Once the scene is secured, you need to document everything in place. After documenting the scene, the next step is that of seizing various items, namely, computers. Before computers can be seized, they typically have to be shut down. I’ll discuss the various issues associated with operating systems and system function as they relate to shutting down various systems. I’ll end the discussion with the bagging-and-tagging process, transporting, and securing, all in support of the all-important chain of custody. Let’s get started!

Securing the Scene

When you arrive at the scene, safety is the number-one ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required