You are a digital forensics intern at Azorian Computer Forensics, a privately owned forensics investigations and data recovery firm in the Denver, Colorado area. Azorian has been called to a client’s site to work on a security incident involving five laptop computers. You are assisting Pat, one of Azorian’s lead investigators. Pat is working with the client’s IT security staff team leader, Marta, and an IT staff member, Suhkrit, to seize and process the five computers. Marta is overseeing the process, whereas Suhkrit is directly involved in handling the computers.
The computers must be removed from the employees’ work areas and moved to a secure location within the client’s premises. From there, you will assist Pat in preparing the computers for transporting them to the Azorian facility.
Chain of Custody
Evidence is always in the custody of someone or in secure storage. The chain of custody form documents who have the evidence in their possession at any given time. Whenever evidence is transferred from one person to another or one place to another, the chain of custody must be updated. A chain of custody document shows:
What was collected (description, serial numbers, and so on)
Who obtained the evidence
Where and when it was obtained
Who secured it
Who had control or possession of it
The chain of custody requires that every transfer of evidence be provable that nobody else could have accessed that evidence. It is best to keep the number of transfers as low as possible.
Chain of Custody Form
Fields in a chain of custody form may include the following:
Reason of evidence obtained
Address from person received
Location obtained from
For each evidence item, include the following information:
Released by (signature, name, title)
Received by (signature, name, title)
Purpose of chain of custody
For this assignment:
Walk through the process of removal of computers described above from employees’ work areas to the client’s secure location and eventually to the Azorian facility. Who might have possession of the computers during each step? Design a flow chart of the process.
Each transfer of possession requires chain of custody documentation. Each transfer requires a signature from the person releasing the evidence and the person receiving the evidence. Include the from/to information in your diagram or flow chart.
Format: Microsoft Word Document or PowerPoint (or compatible) or the drawing program of your choice; file saved as a PDF
Length: 1–3 pages
Delivering a high-quality product at a reasonable price is not enough anymore.
That’s why we have developed 5 beneficial guarantees that will make your experience with our service enjoyable, easy, and safe.
You have to be 100% sure of the quality of your product to give a money-back guarantee. This describes us perfectly. Make sure that this guarantee is totally transparent.Read more
Each paper is composed from scratch, according to your instructions. It is then checked by our plagiarism-detection software. There is no gap where plagiarism could squeeze in.Read more
Thanks to our free revisions, there is no way for you to be unsatisfied. We will work on your paper until you are completely happy with the result.Read more
Your email is safe, as we store it according to international data protection rules. Your bank details are secure, as we use only reliable payment systems.Read more
By sending us your money, you buy the service we provide. Check out our terms and conditions if you prefer business talks to be laid out in official language.Read more