Preservation of evidence

Digital Forensic is the preservation, identification, recovery, documentation, analysis, and interpretation of digital evidence.
Digital evidences are electronically stored records, facts, signs, information of probative value that shows clearly that an event occurred or that a crime has been committed.
Preservation of Digital Evidence is the crux of Digital Forensics. As such, it must be handled in a way to ensure that it is promptly identified, preserved, collected, examined, analyzed and documented appropriately so that it is evidently weighty, authentic, reliable, believable, complete and that it passes the test of legal admissibility.
Evidence Preservation is being constantly plagued with issues needed to be technically, administratively and legally resolved. Of which is, the rate of standardization of Digital Forensics Processes, particularly evidence preservation, by International standardizing bodies is slower than the challenges and continuously evolving digital technology. Consequently, Proactive, Sustained and Non-fragmented Research and Practitioner Communities must be established, where they do not exist and also supported by national and regional standardization organizations, to see to faster and up-to-date solutions. Such communities have greatly helped to sustain continuous growth and standardization in other fields such as software engineering, web frameworks, and mobile technology.
A consolidated framework, the Enhanced Generic Digital Forensic Investigation Model (EGDFIM), is proposed in this work.

The  recent  rise  in  disputes  relating  to
electromagnetic computer records has prompted the
demand for digital forensic tools that can be used to
preserve,  investigate,  and  analyze  digital  evidence.
Among  the  currently  available  digital  forensic
publications  are  the  Guidelines  for  Preservation  of
Evidence  published  by  the  Institute  of  Digital
Forensics,  a  non-profit  organization.  However,  in
the field of digital evidence preservation, speed and
accuracy are fundamental requirements. Under such
circumstances,  working  with  guidelines  in  paper
media form is difficult for investigators. Therefore,
we  have  developed  an  application  program  that
supports  evidence  preservation  work  by  displaying
contents based on the Guidelines for Preservation of
Evidence  on  the  Android  operating  system.  The
system consists of three components: the first is the
creation  of  contents  for  display  on  an  Android
terminal from the paper guidelines, the second is a
guideline execution section for first responders, and
third is a function that allows the system to generate
an output report based on the first two components.
In this paper, the authors report on improvements to
the  first  and  second  components,  and  the
development  of  the  third.  Additionally,  after
applying  the  complete  system  to  a  small  trial
scenario based on an actual incident, an evaluation
of  the  utility  and  effectiveness  of  the  system  was
conducted.

Preservation of biological evidence can profoundly impact criminal justice as it can be essential to establish the innocence of a convicted person and thus make evident a miscarriage of justice. The paper provides information and insights regarding the state’s duty to preserve biological evidence in criminal justice, thus improving accessibility issues in the post-conviction review in Chile. In doing so, the paper looks beyond Chile’s borders and seeks to obtain lessons from US states’ preservation statutes. The research uses law comparison to assess and comprehend the appropriateness of Chilean regulation and then to identify areas for improvement in the criminal justice system.