Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Digital Evidence Preservation: Considerations for Evidence Handlers

Published

Author(s)

Barbara Guttman, Douglas R. White, Shannan Williams, Tracy Walraven

Abstract

The preservation of digital evidence (DE) presents unique problems beyond traditional evidence preservation. This document addresses considerations related to the preservation of digital evidence. This document is part of a series on evidence management and its primary audience is evidence management professionals. The document discusses traditional sources of digital evidence including physical storage media and digital objects and also addresses law enforcement generated digital evidence. The document further discusses key considerations related to digital evidence preservation and the difference from the preservation of other evidence types. Related considerations, such as acquisition of digital evidence are only addressed when there is overlap with preservation.
Citation
NIST Interagency/Internal Report (NISTIR) - 8387
Report Number
8387

Keywords

digital evidence, forensics, computer forensics, evidence management

Citation

Guttman, B. , White, D. , Williams, S. and Walraven, T. (2022), Digital Evidence Preservation: Considerations for Evidence Handlers, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.IR.8387, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=933104 (Accessed December 3, 2024)

Issues

If you have any questions about this publication or are having problems accessing it, please contact reflib@nist.gov.

Created September 8, 2022, Updated November 29, 2022