New answers tagged forensics
26
votes
How can you trust a forensic scientist to have maintained the chain of custody?
Ultimately you can't - there always has to be a level of trust in the people involved.
Once you have a hash of the original contents of the drive you can easily compare that to the hash of the image(s)...
- 14.7k
35
votes
How can you trust a forensic scientist to have maintained the chain of custody?
Traditionally, the investigator would physically remove the disk, put it in an evidence bag and take it to the lab. In the lab, they would remove it from the bag and use a physical read-only ...
- 34.6k
Top 50 recent answers are included