Computer evidence at a crime scene is documented with a tag stating who had possession of the
evidence at a given time.

Which of the following does this illustrate?

A.
System image capture

B.
Record time offset

C.
Order of volatility

D.
Chain of custody

Explanation: