Fandom

The IT Law Wiki

Evidence preservation

32,169pages on
this wiki
Add New Page
Talk0 Share

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.

Definition Edit

Evidence preservation is the process of seizing suspect property without altering or changing the contents of data that resides on devices and removable media. It is the first step in digital evidence recovery.

Overview Edit

Preservation involves the search, recognition, documentation, and collection of electronic-based evidence. In order to use evidence successfully, whether in a court of law or a less formal proceeding, it must be preserved. Failure to preserve evidence in its original state could jeopardize an entire investigation, potentially losing valuable information about an incident permanently.

Source Edit

Also on Fandom

Random Wiki