Computer evidence at a crime scene is documented with a tag stating who had possession
of the evidence at a given time. Which of the following does this illustrate?

A.
System image capture

B.
Record time offset

C.
Order of volatility

D.
Chain of custody