Society and Ethics in IT2081.15 marksDigital evidence preservation techniques
How do you preserve and analyze digital evidence in computer crime? Explain.
How do you preserve and analyze digital evidence in computer crime? Explain. [5]
Chain of Custody - Maintain a documented record of who handled the evidence, when, and for what purpose - Prevents tampering claims and ensures admissibility in court - All transfers must be logged with signatures and timestamps Imaging and Backup - Create forensic images (bit-by-bit copies) of s...