easy5 pts · first answer countsdigital-forensicsincident-response
Why chain of custody matters
During an investigation, why do analysts keep a chain of custody record for evidence such as a disk image?
Discussion 0
Join free to post in the discussion.
Related questions
- Backups that survive ransomwareCybersecurity Analyst
- NIST incident response lifecycleCybersecurity Analyst
- Containing a hijacked Microsoft 365 accountCybersecurity Analyst
- What EDR host isolation doesCybersecurity Analyst
- What evidence to collect firstCybersecurity Analyst
- File integrity alert on a web serverCybersecurity Analyst
- Artefacts of PsExec lateral movementCybersecurity Analyst
- First move on an encrypting hostCybersecurity Analyst