Digital Evidence Issues – Preserve Metadata Before Files Change
Digital evidence can change without obvious visual signs. Opening, exporting, renaming, converting, forwarding, or moving a file may alter timestamps or other information associated with it. When a file may…