Chain of Custody form?

[cmerkel at gmail.com (Chris Merkel)]

Speaking of hard drives - when I seize a hard drive, I use these
anti-static, tamper-evident bags with a CoC form printed right on
them:

http://alertsecurityproducts.com/evidence-bag/index.shtml

I only use paper CoC forms when I have to seize a whole machine (i.e.
LE is being obnoxious or overly careful).

- Chris Merkel

On Wed, Sep 30, 2009 at 7:53 AM, Ben Greenfield <bcg at struxural.com> wrote:
> You may be interested in this as well,
> Forensic Examination of Digital Evidence: A Guide for Law Enforcement :
> http://www.ncjrs.gov/pdffiles1/nij/199408.pdf
>
> On Wed, Sep 30, 2009 at 8:51 AM, Ben Greenfield <bcg at struxural.com> wrote:
> > Are you taking custody of an entire computer? ?I've only ever taken
> > custody of hard drives, and we just use a form that has the time/date
> > and the signature of the last person who had custody and the person
> > taking custody.
> >
> > On Mon, Sep 28, 2009 at 10:52 PM, Chris Merkel <cmerkel at gmail.com> wrote:
> > > There's one on the Helix CD that works just fine. They're really
> > > pretty simple forms - less to screw up. Here's a query for more:
> > >
> > > http://www.google.com/search?&q=forensics+chain+of+custody+form+filetype%3Apdf
> > >
> > > - Chris Merkel
> > >
> > > On Sun, Sep 27, 2009 at 1:32 PM, Karl Schuttler
> > > <karl.schuttler at gmail.com> wrote:
> > > > Hey folks,
> > > >
> > > > Does anyone have a good sample of a chain of custody form for digital
> > > > forensics? I'm curious to see some that differ from typical law
> > > > enforcement chain of custody sheets; ie having space to detail
> > > > information about computers, specifically internal and external
> > > > configuration.
> > > >
> > > > Karl
> > > > _______________________________________________
> > > > Pauldotcom mailing list
> > > > Pauldotcom at mail.pauldotcom.com
> > > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > > Main Web Site: http://pauldotcom.com
> > >
> > >
> > >
> > > --
> > > - Chris Merkel
> > > _______________________________________________
> > > Pauldotcom mailing list
> > > Pauldotcom at mail.pauldotcom.com
> > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > Main Web Site: http://pauldotcom.com
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com



-- 
- Chris Merkel