In digital evidence handling, what practice supports data integrity over the full lifecycle?

• A. Editing files for readability
• B. Random backups and deletion
• C. Public sharing
• D. Hash verification, imaging, secure storage, and maintained custody

Answer: (D)

Maintaining data integrity across the digital evidence lifecycle relies on creating a precise copy, verifying it never changes, storing it securely, and keeping a complete custody record. Hash verification provides a unique fingerprint for the data, so any alteration will be detectable when the hash of the current data doesn’t match the original. Imaging creates a forensically sound bit-for-bit copy for analysis while leaving the original untouched, ensuring the source remains pristine. Secure storage protects the copies from tampering, alteration, or loss. Maintained custody documents every transfer and access, establishing a verifiable trail that supports admissibility and demonstrates that the evidence has not been mishandled. Together, these practices preserve authenticity and integrity from collection through presentation.