Digital Forensics Essentials (D|FE)

An investigator collects a hard drive from a crime scene and needs to ensure the digital evidence will be accepted in a court of law. According to the described digital forensics process, which step directly follows Identification and is critical to preventing tampering by cyber criminals?

During the investigation phase of a case, an analyst must demonstrate that the acquired image file has not been altered since collection. Based on the DFE Module 02 lab exercises, which technique is intended to verify this integrity?