Computer evidence at a crime scene is documented with a tag stating who had possession
of the evidence at a given time. Which of the following does this illustrate?
A.
System image capture
B.
Record time offset
C.
Order of volatility
D.
Chain of custody