Computer evidence at a crime scene is documented with a tag stating who had possession of the
evidence at a given time.
Which of the following does this illustrate?
A.
System image capture
B.
Record time offset
C.
Order of volatility
D.
Chain of custody