Suppose you have recently responded to your first computer forensic incident; based on the results of your investigation, you have uncovered a criminal case involving child pornography that will go to court. The court has subpoenaed you, since you were the initial responder and performed the preliminary forensics on the suspect’s computer hard disk. Additionally, your lawyer has advised you that the defense attorney will question you extensively concerning your handling of the evidence.
Write a three to five (3-5) page paper in which you:
Analyze the overall procedures for First Responder and Incident Handling, and ascertain the fundamental way in which such procedures relate to the scenario in this specific case.
Explain the major steps needed to preserve the integrity of the evidence and the primary repercussions if such evidence is improperly preserved.
Consider the importance of the chain of custody, and explain the main reasons why the documentation required to preserve the chain of custody is critical.
Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.