The process of documenting the seizure of digital evidence and, in particular, when that evidence changes hands, is known as:

Related MCQs

• When assessing the reliability of digital evidence, the investigator is concerned with whether the computer that generated the evidence was functioning normally, and:
• Of particular significance in the scientific method is the weight attached to finding evidence which supports a particular hypothesis
• Given the scope and consequences of violent crimes, it is advisable to seek out and preserve all available digital evidence.
• The main difference in MACs and digital signatures is that, in digital signatures the hash value of the message is encrypted with a user’s public key.
• A valid definition of digital evidence is:
• What are the three general categories of computer systems that can contain digital evidence?
• In terms of digital evidence, the Internet is an example of:
• Investigators should not rely on one piece of digital evidence when examining an alibi – they should look for an associated _______.
• Types of digital evidence that might corroborate an alibi include:
• The process model whose goal is to completely describe the flow of information in a digital investigation is known as: