Investigation Methodology
Chain of Custody
Chain of custody documents how evidence was collected, handled and transferred so a reviewer can assess its history. Nexus supports ISO/IEC 27037-aligned custody records on Pro and Agency when custody is enabled at case creation. Recorded entries include sequential numbers and SHA-256 hash-chain fields. The Chain intact display checks links between entries; it does not independently verify their contents or establish admissibility. Review available records and retain original material before relying on an export.
Related OSINT terms
- OSINT (Open Source Intelligence)Open Source Intelligence (OSINT) is the collection, analysis, and dissemination of information gathered from publicly available sources. These sources include…
- Due DiligenceDue diligence is a comprehensive investigation or audit conducted before entering into a business relationship, transaction, or agreement. Background checks…
- Provenance (Evidence)Provenance is the documented origin and history of a piece of evidence: where it was found, when it was retrieved…
- Evidence RecordAn evidence record is a preserved, attributable item of source material captured during an investigation — the page, document, listing…
- Investigation Notes (Encrypted)Investigation notes are structured records created by investigators to document observations, hypotheses, interview summaries, and analytical conclusions during a case.…
- Evidence-First InvestigationEvidence-first investigation is an approach in which every finding is tied to an inspectable source before it is presented, and…
Related Skills
Investigative Skills in Nexus that apply Chain of Custody to a live case.