Computer Forensics

Copyright Priscilla Oppenheimer

Lab 3 Evidence Tags and Logs

Objectives

• Develop evidence tags and logs that we can use next week when we seize a computer into evidence.
• Demonstrate (or practice developing) proficiency with word processing software (such as MS Word)

Step 1. Create an evidence tag

1. Based on information that we covered in class, create a blank evidence tag.
2. Include in your evidence tag information such as:
   1. Case #, item #, date, time
   2. Person seizing, consenting person, location where evidence found
   3. Description, manufacturer, model, serial #
3. Save your evidence tag in your Computer Forensics folder (that you created last week) on your F drive.
4. Before next week, print your tag and make some copies that you can use when we seize a computer next week.

Step 2. Create an evidence log.

1. Based on information that we covered in class, create an evidence log that will document each tagged piece of evidence that is given to the evidence custodian.
2. The evidence log should include information such as the Case # and the name and signature of the evidence custodian.
3. Following that general information should be a table that will have a row for each item.
4. The table should include a column for the item #, date and time seized, short description, and the name of the person who seized the item.
5. Save your evidence log in your Computer Forensics folder on your F drive.
6. Before next week, print one copy of your log.

Step 3. Submit your work.

1. Submit your work electronically to your instructor:
1. Your evidence tag (the MS Word file that contains your tag).
2. Your evidence log (the MS Word file that contains your log).