# Problem You are assisting in performing digital forensics on a computer used by a former employee. You need to ensure that the appropriate steps are taken to preserve evidence and the chain of custody as you physically move the evidence to an investigator and, after analysis, to a locked company safe. Move the forensics items into the correct fields to label the steps in the evidence's journey. Check each checkbox where an update to the chain of custody form should occur. Steps in the evidence's journey: * Investigated system. * Extracted evidence. * Transport. * Hand-off to investigator. * Forensic analysis. * Company vault/safe. Forensic items: * Software Forensics Toolkit. * Secure Short-term Storage. * Anti-static, Tamper-evident Bag. * Secure Long-term Storage. # Process ... # Answer All of the checkboxes should be checked. * Investigated system. * Extracted evidence. * Anti-static, Tamper-evident Bag. * Transport. * Secure Short-Term Storage. * Hand-off to investigator. * Forensic analysis. * Company vault/safe. * Secure Long-term Storage.