A forensic analyst needs to prove that data has not been tampered with since it was collected. Which of the
following methods will the analyst MOST likely use?


A. Look for tampering on the evidence collection bag.
B. Encrypt the collected data using asymmetric encryption.
C. Ensure proper procedures for chain of custody are being followed.
D. Calculate the checksum using a hashing algorithm.