|
The
Chain of Custody is very important
to any potential civil or criminal court proceedings. It provides
documentation and authentication as well as accountability for each
piece of evidence relative to your specific case. The digital media
that we deal with will often find itself in a court of law. As such we
have to do everything possible to prepare for that event whether it
occurs or not.
Criminal and Civil Courts are very specific about how evidence is to be
handled and presented in court during a preliminary hearing, civil
litigation or trial. The chain of custody will show each person that
handled the evidence, for what reason and the current physical location
of the evidence. The Federal and California rules of evidence will
provide more in-depth explanation of this issue.
By showing the evidence was not tampered with and that a consistent
step by step course of action was taken, you will give your evidence
more credibility. The lack of a chain of custody or an incomplete chain
of custody will most likely have a negative effect on your case.
Engagement:
Once you have chosen eFor computer forensics to assist you in your
case, we will outline the scope of our involvement, confidentiality and
non-disclosure issues. We will give you a conservative time frame for
the work to be complete. You will provide us with the keywords,
investigative sources for us to complete the analysis.
Duplication:
We will duplicate the original media by making a “bit
stream” image of the original media. We will not work on the
original media. The image will be verified as an exact duplicate using
an MD5 hash.
Analysis:
We will conduct the analysis on the media. We normally find data in
many areas of the hard drive. Some of the areas area:
|
