Practical
In this practical, you will fill out a Chain of custody form *find sample form attached to this question*for a given set of devices and a given set of events. Fill out the form as best as you are able given the circumstances. Best practices will be discussed during the week.
Complete the provided Chain of Custody Form, complete with dates and times, signatures (you can fill out the form in Word and write //SIGNED BY TOM// (replace Tom by the appropriate person) and identifying information. Turn the completed Chain of Custody form in through Canvas. Ask your instructor if you have questions.
Information for the Chain of Custody Form:
Timeline of Events:
- •On Wednesday, February 11, 2015, at 10:19 AM, you received the computer in Image 1 via a FedEx carrier, tracking number 800053991099, for analysis
- •That afternoon, you removed the hard drive in Image 2 and obtained a forensic image.
- •On Friday, February 13, 2015, at 1:00 PM, Tim Young, Director of IT for the client, came to your office and turned over the USB flash drive in Image 3 to you for analysis.
- •After your analysis was complete and at the request of the client, you turned over the original hard drive in Image 2 to Special Agent Brent Cline of the FBI for analysis and criminal prosecution.
