Digital Forensics Processing and Procedures

Chapter 8

Incident Response

Abstract

This chapter looks at the stages of incident response for all types of incidents, from initial contact through seizure to transporting of evidence to the Forensic Laboratory. It examines the type of equipment and documentation that must be taken to the scene of an incident and the policies and procedures that are required for the safe and efficient processing of the scene of an incident. It addresses the way in which evidence must be handled and protected.

Keywords

incident response; seizure records; imaging; evidence transportation

Table of Contents

8.1 General

8.1.1 Overview

8.1.2 Legislative Considerations

8.1.3 Work Standards

8.1.4 Health and Safety Issues

8.1.5 Competence

8.1.6 Consent

8.2 Evidence ...