Incident Response Chain Of Custody
Incident Response Chain Of Custody . A process that tracks the movement of evidence through its collection, safeguarding, and analysis lifecycle by documenting each person who handled the evidence, the date/time it was collected or transferred, and the purpose for the transfer. Response measures allow the organization to determine the impact and consequences of the breach. Basics of Incident Handling Slides from letsautomate.it A chain of custody refers to the proper accounting of evidence collected about an incident that is used as part of an investigation. Automatic delivery through a lan or wan. Chain of custody describes the documentation of a piece of evidence through its life cycle.