IS4670

Police Cyber Crimes Division
Computer Evidence Chain of CustodyItem Number(s): 10001-FMT-CCD
Case: State vs PetersonTo be completed by initial collector:
Sean Hulbert
Evidence collected by (name): ________________________________________________________________
08-30-2010
Date/Time collected: ________________________________________________________________________
Evidence description:
Seized hard drive from credit card theft case
_________________________________________________________________________________________
_________________________________________________________________________________________
Describe Collection method (include operating system, utility, commands, arguments, etc):
FTK Imager field seizure and imaged , Windows XP , Physical Write blocker used on hard drive
_________________________________________________________________________________________
_________________________________________________________________________________________
What application software/utility is required to view the file?:
FTK Imager or Encase Imager and CSV Viewer
_________________________________________________________________________________________
_________________________________________________________________________________________
Storage location 99 (Police off site impound cold storage)
Where is evidence initially stored?: ____________________________________________________________
Laptop
How is evidence initially secured?: ____________________________________________________________
Collector signature: ________________________________________________ Date: ___________________Copy History:DateCopied By08-30-2010Sean HulbertCopy Method
FTK ImagerDisposition of original and all copies
Stored and securedTransfer History:
John Dow
Transferred from (print name, sign & date): ________________________________________________________________________
Carlos Castillo 3-24-15
Transferred…