3 ms·
>How is chain of custody maintained if the process is a secret? Couldn't a person argue that the data obtained was planted? Well this is a more general issue (
by jaclaz 9y ago
>How is chain of custody maintained if the process is a secret? Couldn't a person argue that the data obtained was planted?
Well this is a more general issue (I mean not limited to this case or to sending a device to Cellebrite or to another external laboratory) once a chain of custody is formally valid, it has as much integrity as the integrity of the people that had physical access to or worked on the device.
Still - thankfully - "planting" evidence on a modern file system and OS (provided that the end result is an actual physical extraction) is not as easy as it may seem.
Definitely possible, but extremely difficult to achieve without leaving any trace behind.