digital evidence triage worksheet
DESCRIPTION
This is a form intended to be used during the forensic triage of electronic devices. The form has fill-able fields and the original includes a blank notes section that only shows lines when printed.TRANSCRIPT
Digital EviDEncE triagE WorkshEEt
Case Number:
Case Details
Examiner
Company / Department
Evidence Item Number
Storage Size
Number of Devices
OS / File System
File Extension(s)
Directories Account(s)
Search Details
BIOS Details
Version
Access Date / Time
Boot Priority Modified Boot Priority Y N
Security
System Date / Time
File Name(s)
Search Conclusion
Exported Evidence Seized Evidence Date / Time Ended
GREP
Search Notes