An IT technician is transferring a seized server hard drive containing volatile forensic evidence to a lead digital forensics analyst. Both individuals meet in person to execute the evidence handoff. Which of the following details, if omitted from the chain of custody form during this transfer, would directly compromise the legal integrity of the evidence?
- The signature of both the releasing technician and the receiving analyst along with the timestamp of the transferCevap
- BThe physical security classification rating of the secure room where the drive was kept prior to transfer
- CThe specific malware threat category and vulnerability classification assigned to the compromised server
- DThe complete list of all administrative user accounts existing on the server at the time of seizure
Cevap
The signature of both the releasing technician and the receiving analyst along with the timestamp of the transfer
Chain of custody protocols require documenting every transfer of physical or digital evidence with exact dates, timestamps, and signatures from both the person releasing the evidence and the person receiving it. Omitting these verification details creates a gap in accountability, rendering the evidence inadmissible in court or corporate disciplinary actions.
Adım Adım Çözüm
Anahtar Kavram
Chain of Custody Documentation Requirements
Tahmini Süre:1m 0s