Speaking of hard drives - when I seize a hard drive, I use these anti-static, tamper-evident bags with a CoC form printed right on them:
http://alertsecurityproducts.com/evidence-bag/index.shtml I only use paper CoC forms when I have to seize a whole machine (i.e. LE is being obnoxious or overly careful). - Chris Merkel On Wed, Sep 30, 2009 at 7:53 AM, Ben Greenfield <[email protected]> wrote: > You may be interested in this as well, > Forensic Examination of Digital Evidence: A Guide for Law Enforcement : > http://www.ncjrs.gov/pdffiles1/nij/199408.pdf > > On Wed, Sep 30, 2009 at 8:51 AM, Ben Greenfield <[email protected]> wrote: >> Are you taking custody of an entire computer? I've only ever taken >> custody of hard drives, and we just use a form that has the time/date >> and the signature of the last person who had custody and the person >> taking custody. >> >> On Mon, Sep 28, 2009 at 10:52 PM, Chris Merkel <[email protected]> wrote: >>> There's one on the Helix CD that works just fine. They're really >>> pretty simple forms - less to screw up. Here's a query for more: >>> >>> http://www.google.com/search?&q=forensics+chain+of+custody+form+filetype%3Apdf >>> >>> - Chris Merkel >>> >>> On Sun, Sep 27, 2009 at 1:32 PM, Karl Schuttler >>> <[email protected]> wrote: >>>> Hey folks, >>>> >>>> Does anyone have a good sample of a chain of custody form for digital >>>> forensics? I'm curious to see some that differ from typical law >>>> enforcement chain of custody sheets; ie having space to detail >>>> information about computers, specifically internal and external >>>> configuration. >>>> >>>> Karl >>>> _______________________________________________ >>>> Pauldotcom mailing list >>>> [email protected] >>>> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom >>>> Main Web Site: http://pauldotcom.com >>>> >>> >>> >>> >>> -- >>> - Chris Merkel >>> _______________________________________________ >>> Pauldotcom mailing list >>> [email protected] >>> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom >>> Main Web Site: http://pauldotcom.com >>> >> > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com > -- - Chris Merkel _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
