Computer evidence at a crime scene is documented with a tag stating who had possession of the evidence at a
Which of the following does this illustrate?
System image capture
Record time offset
Order of volatility
Chain of custody
Chain of custody deals with how evidence is secured, where it is stored, and who has access to it. When you
begin to collect evidence, you must keep track of that evidence at all times and show who has it, who has seen
it, and where it has been.