Aug 18 2004
Digital Evidence
Justice issues guidelines for handling digital evidence
I don’t participate in the evidence gathering in the corporation currently, but these guidelines still look like they’re worth the time. I’d hate to have a perfectly good criminal case thrown out because I forget to ‘tag and bag’ a hard drive, or because I didn’t record the MD5 checksum for a packet capture to verify it’s the original. I’ll get back to you once I’ve read the whole thing.