After receiving the hard drive from detectives, the forensic analyst for a court case used a log to
capture corresponding events prior to sending the evidence to lawyers. Which of the following do
these actions demonstrate?
A.
Chain of custody
B.
Order if volatility
C.
Data analysis
D.
Tracking man hours and expenses