Authenticity of Digital Evidence
There are three parts which must all be proven true to meet the "Authenticity" criteria. The evidence must be obtained from the computer in question, the evidence must be "complete and accurate" and it must "remain unchanged" since collection [1]. Proving that the evidence has not been tampered ...