A chain of custody is chronological documentation for evidence in a particular case.It is the most important document which needs to stand scrutiny of law.Path of a digital evidence from its seizure to end of case of case is documented. It ensures that the digital artefact was in right hands and was not altered/tmapered on its way and during the investifation.
Tracking
- Who collected the evidence
- What comprises the evidence
- When evidence was collected
- Establishes continuity of who/what/where of evidence
Documentation
- Make, model, serial of teh digital artefact
- Description of the evidence, technical information in any
- Name and signature of individual handing over and receiving evidence
- Case number and tag
