FTK
|
Case No.
PLEASE COMPLETE FORM IN UPPERCASE |
Evidence No. |
|
|
|
|
|
Digital Forensics Lab |
||||||||||||||||||||||||||||||||||
|
Section B: Evidence Collection |
|||||||||||||||||||||||||||||||||||||||||
|
Date/Time Collected |
D D |
M |
M |
Y Y |
|
H H : M M |
Collected by |
||||||||||||||||||||||||||||||||||
|
Site Address |
|||||||||||||||||||||||||||||||||||||||||
|
Section C: Evidence Details |
|||||||||||||||||||||||||||||||||||||||||
|
Date/Time Stored |
D D |
M |
M |
Y Y |
|
H H : M M |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
||||||||||||||
|
Storage Location |
|||||||||||||||||||||||||||||||||||||||||
|
Device Type |
Capacity |
||||||||||||||||||||||||||||||||||||||||
|
Manufacturer |
Model |
||||||||||||||||||||||||||||||||||||||||
|
Serial No. |
|||||||||||||||||||||||||||||||||||||||||
|
MD5 Sum |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
||||||||
|
SHA-1 Sum |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Additional Information... |
|||||||||||||||||||||||||||||||||||||||||
|
Note any damage, marks and scratches |
Digital Image Taken |
|
|
|
Yes |
|
No |
||||||||||||||||||||||||||||||||||
|
Section D: Image Details |
|||||||||||||||||||||||||||||||||||||||||
|
Date/Time Imaged |
D D |
M |
M |
Y Y |
|
H H : M M |
Imaged by |
||||||||||||||||||||||||||||||||||
|
Storage Location |
|||||||||||||||||||||||||||||||||||||||||
|
Image Filename |
Image Size |
|
|
|
|
|
(inc. unit) |
||||||||||||||||||||||||||||||||||
|
Additional Information... |
|||||||||||||||||||||||||||||||||||||||||
|
This form is to be used when collecting a hardware device containing data that may be of interest in a case. Guidelines:
•Ensure that this form only refers to one item of evidence and that one is completed for each item of evidence •This form must be accompanied by Chain of Custody forms which detail the individuals that have handled the evidence •Further remarks can be noted overleaf in Section E: Remarks •It is important that these forms are kept with the evidence at all times •Upon handover or disposal please complete Section F: Evidence Handover |
|
Digital Forensics Lab |
|
|
Section E: Remarks |
|
|
Section F: Evidence Handover / Disposal |
|
|
Date/Time |
|
|
Submitted by |
Signature |
|
Received by |
Signature |
|
Witnessed by |
Signature |
|
Chain of Custody Form for use with a Single Evidence form Digital Forensics Lab Page No. Case No. Evidence No. This form must accompany a Single Evidence form and it’s respective evidence |
||
|
Chain of Custody |
||
|
SUBMITTER |
RECEIVER |
|
|
Name: |
|
Name: |
|
Signature: |
|
Signature: |
|
|
Evidence Modified: |
|
|
Date & Time: |
Yes / No |
Date & Time: |
|
SUBMITTER |
RECEIVER |
|
|
Name: |
|
Name: |
|
Signature: |
|
Signature: |
|
|
Evidence Modified: |
|
|
Date & Time: |
Yes / No |
Date & Time: |
|
SUBMITTER |
RECEIVER |
|
|
Name: |
|
Name: |
|
Signature: |
|
Signature: |
|
|
Evidence Modified: |
|
|
Date & Time: |
Yes / No |
Date & Time: |
|
SUBMITTER |
RECEIVER |
|
|
Name: |
|
Name: |
|
Signature: |
|
Signature: |
|
|
Evidence Modified: |
|
|
Date & Time: |
Yes / No |
Date & Time: |
|
SUBMITTER |
RECEIVER |
|
|
Name: |
|
Name: |
|
Signature: |
|
Signature: |
|
|
Evidence Modified: |
|
|
Date & Time: |
Yes / No |
Date & Time: |
|
SUBMITTER |
RECEIVER |
|
|
Name: |
|
Name: |
|
Signature: |
|
Signature: |
|
|
Evidence Modified: |
|
|
Date & Time: |
Yes / No |
Date & Time: |
|
SUBMITTER |
RECEIVER |
|
|
Name: |
|
Name: |
|
Signature: |
|
Signature: |
|
|
Evidence Modified: |
|
|
Date & Time: |
Yes / No |
Date & Time: |
|
If this form is full please continue on another page |