Integrity of a forensic bit stream image is often determined by:

A.
Comparing hash totals to the original source

B.
Keeping good notes

C.
Taking pictures

D.
Can never be proven

Explanation:
A: Ensuring the authenticity and integrity of evidence is critical. If the courts feel the evidence or its copies are not accurate or lack integrity, it is doubtful that the evidence or any information derived from the evidence will be admissible. Th e current protocol for demonstrating authenticity and integrity relies on hash functions that create unique numerical signatures that are sensitive to any bit changes. Currently, if these signatures match the original or have not changed since the original collection, the courts will accept that integrity has been established. Page 532.