Implementing Digital Forensic Readiness

Chapter 3

Evidence Management

Abstract

The lifetime of digital evidence requires that it can be managed and administered throughout every stage of an investigation. This requires that digital evidence is properly collected, handled correctly, and accurately stored to preserve its integrity throughout its lifetime.

Keywords

Education; Evidence; Lab; Operations; Policies; Rules

 

This chapter follows the high-level digital forensic process model to identify the requirements for properly gathering, processing, and handling digital evidence throughout its lifetime. You will learn about the technical, administrative, and physical controls necessary to safeguard digital evidence in before, during, and after a digital forensic investigation.

Introduction

Evidence ...