After receiving the hard drive from detectives, the forensic analyst for a court case used a log to capture
corresponding events prior to sending the evidence to lawyers. Which of the following do these actions
demonstrate?

A.
Chain of custody

B.
Order if volatility

C.
Data analysis

D.
Tracking man hours and expenses