FSIS 643 Incident Response and Evidence Collection

Examines relevant laws regarding the search and seizure of digital evidence, the tools available to create a "best evidence" image of the digital evidence, and how to properly document the seizure, validate the image set, and establish a proper chain of custody for all evidence seized.