The collection and preservation of digital evidence begins with the first responding officer. The scene my first be secured and legal authority to seize the evidence has been confirmed then devices can be collected. However, there is a process that must be followed to ensure the digital evidence is not damaged. The digital evidence process consists of five phases: identification, collection/acquisition, transportation, analysis/examination, and report( Houck & Siegel, 2015). Following this process is critical because digital evidence can contain non-digital evidence such as fingerprints and neither type of evidence should be damaged or
The collection and preservation of digital evidence begins with the first responding officer. The scene my first be secured and legal authority to seize the evidence has been confirmed then devices can be collected. However, there is a process that must be followed to ensure the digital evidence is not damaged. The digital evidence process consists of five phases: identification, collection/acquisition, transportation, analysis/examination, and report( Houck & Siegel, 2015). Following this process is critical because digital evidence can contain non-digital evidence such as fingerprints and neither type of evidence should be damaged or