Please enable JavaScript.
Coggle requires JavaScript to display documents.
2 - Artifacts, evidence collection, and forensic procedures - Coggle…
2 - Artifacts, evidence collection, and forensic procedures
5 principles to guide digital evidence technicians as they perform media analysis, network analysis and software analysis in the pursuit of forensically recovered evidence
All activity relating to the seizure, access, storage, or transfer of digital evidence must be fully documented, preserved, and available for review
An individual is responsible for all actions taken with respect to digital evidence while the digital evidence is in their possession
When it is necessary for a person to access original digital evidence, that person must be forensically competent
Any agency that is responsible for seizing, accessing, storing, or transferring digital evidence is responsible for compliance with these principles
Upon seizing digital evidence, actions taken should not change that evidence
-