Scribd
Upload
19 views2 pages

Fort Worth Police Imaging Checklist Form

The document is an imaging checklist form used by the Fort Worth Police Department Computer Crime Detail. It lists actions that should be taken before, during, and after imaging a suspect's computer hard drive for evidence. The form includes steps like completing request forms, removing and documenting the hard drive, making an error-free image with anti-virus scanning, and returning the computer to storage while it awaits analysis.

Uploaded by

krisnadwi09
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOC, PDF, TXT or read online on Scribd
19 views2 pages

Fort Worth Police Imaging Checklist Form

The document is an imaging checklist form used by the Fort Worth Police Department Computer Crime Detail. It lists actions that should be taken before, during, and after imaging a suspect's computer hard drive for evidence. The form includes steps like completing request forms, removing and documenting the hard drive, making an error-free image with anti-virus scanning, and returning the computer to storage while it awaits analysis.

Uploaded by

krisnadwi09
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOC, PDF, TXT or read online on Scribd

Fort Worth Police Department

Computer Crime Detail

IMAGING CHECKLIST FORM

CFL Case Number: _________ _________


Offense Report Number: __________ ______

PRIOR TO IMAGING

ACTION TAKEN YES NO INFO


“Request for Lab Exam Form” Completed
Copy of Search Warrant or Consent submitted
Device checked in/out of Property Room
“Property/Evidence Receipt Form” completed
Does each item have Service # assigned
Exterior photographs taken of computer
Interior photographs taken of computer
“Internal Inventory Form” completed
HDD removed from suspect computer and assigned CFL #
Suspect computer BIOS date/time documented
Actual date/time documented
Jumper settings documented
Check for removable media (CD, DVD, Floppies, etc)

IMAGING

ACTION TAKEN YES NO INFO


Analysis machine updated for O/S software upgrades/patches
Analysis machine anti-virus software updated
Analysis machine disconnected from Internet connection
Hardware or software write-blocker installed
Suspect HDD scanned for virus’
Image made of HDD to analysis machine HDD
Image verified free of errors
Suspect HDD removed from write-blocker
Suspect HDD returned to computer
Suspect computer placed under seal (tape or repackaged)
Suspect computer stored in CFL Evidence room until analysis complete
Stored items listed on the CFL “Evidence Room Inventory Log Form”

POST ANALYSIS

Page 1 of 2 Created on 1/24/2005 9:34 AM


Fort Worth Police Department
Computer Crime Detail

IMAGING CHECKLIST FORM

CFL Case Number: _________ _________


Offense Report Number: __________ ______

ACTION TAKEN YES NO INFO


Suspect computer logged out of CFL “Evidence Room Inventory
Form”?
Suspect computer returned to Property Room
Property/Evidence Receipt Form completed

Page 2 of 2 Created on 1/24/2005 9:34 AM

You might also like