312-39V2: Certified SOC Analyst v2

By ECCouncil · Question Mode

QuestionQ136

VerifiedForensics Investigation and Malware Analysis

According to the forensic investigation process, what step is performed immediately after evidence is collected?

Explanation

A chain-of-custody document establishes the chronological record of who collected, handled, transferred, and stored evidence. Maintaining this record from collection onward preserves the evidence’s integrity and supports its admissibility.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!