In which phase does Bruno maintain a logbook and create a chain of custody record?

The phase in which Bruno maintains a logbook and creates a chain of custody record is evidence preservation. During this critical phase of a digital forensic investigation, it is essential to document every interaction with the evidence meticulously. The logbook serves as a detailed record of all actions taken regarding the evidence, including when it was collected, who handled it, and any changes in its condition.

The creation of a chain of custody record is vital for ensuring that the integrity of the evidence is maintained throughout the investigation. This record helps establish a clear history of the evidence from the moment it was acquired through its various stages of handling, thereby supporting its admissibility in a court of law. Proper evidence preservation practices are fundamental in digital forensics to prevent contamination, alteration, or tampering of digital data, ensuring it remains reliable and trustworthy for analysis and eventual presentation in legal proceedings.