Elements and Performance Criteria
- Determine job requirements
- Detect electronic evidence using observation techniques and appropriate technological methods.
- Isolate electronic evidence prior to examination.
- Identify recording methods to document the electronic evidence.
- Determine most appropriate methodology to image the electronic evidence based on the information being sought and the actual process of analysis of the investigation.
- Image storage device
- Collect and package electronic evidence
- Collect electronic evidence so as to prevent contamination or loss.
- Package and store evidence to maintain continuity and prevent degradation or contamination.
- Enter details of electronic evidence collected in case notes and, where appropriate, in the exhibit register to maintain the chain of custody.
- Determine job requirements
- Detect electronic evidence using observation techniques and appropriate technological methods.
- Isolate electronic evidence prior to examination.
- Identify recording methods to document the electronic evidence.
- Determine most appropriate methodology to image the electronic evidence based on the information being sought and the actual process of analysis of the investigation.
- Image storage device
- Collect and package electronic evidence
- Collect electronic evidence so as to prevent contamination or loss.
- Package and store evidence to maintain continuity and prevent degradation or contamination.
- Enter details of electronic evidence collected in case notes and, where appropriate, in the exhibit register to maintain the chain of custody.