thesecurityguide.com

This is a general Forensics Procedures PowerPoint Presentation that covers the basic procedures and also setting up a forensics lab. This is a great intro presentation for staff and management. Lab equipment requirements are a little dated since this was done a few years back.

This is a diagram of a standard forensics imaging equipment setup for acquisition in the office and the field.

This is a RTF basic template for computer forensics reports. This is a complete report format that covers best practices to comply with investigation legal requirements.

This is a Evidence/Chain of Custody form in Word format that I have created and used. This form is not locked and can be modified.

Authorization to destroy original hard drive and discontinue storage form. This RTF document form is intended to be used by companies performing forensics work where original evidence is stored. This form authorizes the company to destroy the original hard drive and discontinue storage.