Re:A dark web tycoon pleads guilty, but how was he caught?
by jascii on Monday February 10, 2020 @05:12PM
(#22293954)
Chain of custody is one tool used to satisfy part of the burden of proof regarding correctness of the evidence. There are others like sworn testimony or corroborating evidence.
This only is meaningful in a courtroom situation, a lot of "evidence" never sees the courtroom and is merely used as information to help the investigation.
I know in some computer forensics work it is important to be able to prove evidence has not been tampered with.
So for example, cracking hashes instead of working with encrypted data can create safe space for non-leo to work without undermining an investigation.
For example, a case of illegal doping, the accused Pearson’s samples must be able to be shown to not have been tampered with.
It seems being able to prove the source of evidence would be the first step of this process.