Digital Evidence Preservation: Considerations for Evidence Handlers

Published

September 8, 2022

Author(s)

Barbara Guttman, Douglas R. White, Shannan Williams, Tracy Walraven

Abstract

The preservation of digital evidence (DE) presents unique problems beyond traditional evidence preservation. This document addresses considerations related to the preservation of digital evidence. This document is part of a series on evidence management and its primary audience is evidence management professionals. The document discusses traditional sources of digital evidence including physical storage media and digital objects and also addresses law enforcement generated digital evidence. The document further discusses key considerations related to digital evidence preservation and the difference from the preservation of other evidence types. Related considerations, such as acquisition of digital evidence are only addressed when there is overlap with preservation.

Citation

NIST Interagency/Internal Report (NISTIR) - 8387

Report Number

8387

NIST Pub Series

NIST Interagency/Internal Report (NISTIR)

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.IR.8387

Local Download

Keywords

digital evidence, forensics, computer forensics, evidence management

Citation

Guttman, B. , White, D. , Williams, S. and Walraven, T. (2022), Digital Evidence Preservation: Considerations for Evidence Handlers, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.IR.8387, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=933104 (Accessed October 9, 2025)