Chain Of Custody Log Drafter

Use when a digital-forensic examiner, DFIR responder, law-enforcement investigator, internal-investigation lead, e-discovery custodian, or counsel needs to draft a court-admissible chain-of-custody (CoC) record, acquisition worksheet, and examiner-action log for digital evidence in line with NIST SP 800-86 (Identification → Collection → Examination → Analysis → Reporting), ISO/IEC 27037 (identification, collection, acquisition, preservation), and SWGDE best practices. Guides scoped intake of the case, evidence items, acquisition method, write-blocker / tool versions, and hash values; produces a DRAFT CoC record with per-transfer entries, hash-verification gates at acquisition / duplication / transfer / return, an examiner-action log, and an evidence-integrity self-check — for examiner / counsel review before submission as a discoverable artefact. Never opines on the merits of the underlying investigation, never authenticates an item the user has not custody of, and never recommends destruction or sanitization of evidence.

by @archlab-space (devasher)·MIT-0