The University of SydneyPage 20Forensics Examination Process–Seizure àAcquisition àAnalysis àReporting–Chain of Custody–Refers to the order in which items of evidence have been handled during the investigation of a case –Proper chain of custody must declare clearly how digital evidence was discovered, acquired, transported, investigated (analyzed), preserved, and handled between different parties involved in the investigation.–What is the digital evidence? (E.g., describe the acquired digital evidence.)–Where was the digital evidence found? (E.g., computer, tablet, mobile phone)–How was the digital evidence acquired? (E.g., tools used; you also need to mention the steps taken to preserve the integrity of evidence)–How was the digital evidence transported, preserved, and handled?–How was the digital evidence examined? (E.g., any tools and techniques used.)–When was the digital evidence accessed, by whom and for what reason?–How was the digital evidence used during the investigation?