Question 150
Main Page
Which of the following actions best helps avoid spoliation in digital forensics?
A. Overwrite files after review
B. Collect only logs, not memory
C. Document chain of custody and use write-blockers
D. Compress disk images
Show Answer