thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

Admissibility

Whether evidence meets legal standards to be accepted in court, such as relevance, reliability and proper handling.

Definition

Digital evidence must be relevant, authentic and collected lawfully with integrity maintained. Courts consider chain of custody, forensically sound methods and expert testimony. US federal courts apply the Federal Rules of Evidence and the Daubert standard for expert methods.

Example

A forensic image accepted in court because hashes matched and custody was fully documented.

Exam tip

Proper chain of custody and verified hashes are the keys to admissibility.

Related terms