Evidence handling is of primary importance for the RCMP Tech Crime Unit Members when called upon to investigate a possible cybercrime. When such an incident occurs, it is important that the IT personnel in place is in a position to clearly identify the potential digital-related evidence and to properly preserve it upon the arrival of the RCMP High Tech Crime Members. This presentation will cover the necessary actions that IT personnel are required to perform under those circumstances as well as the processes to respect when reporting an incident to their RCMP High Tech Crime Unit.
