Handling Evidence: Volatility, Copies, Hashes and Custody
beginner 40 min 3 tasksSubscription
The rules that make digital evidence trustworthy: collect the most fragile first, work on copies, prove nothing changed with a hash, record who held it, and write down everything you do.
This lab is available with a Purple Edge subscription. Sign in to view the full overview and start the lab.
Part of these paths
Unlock this lab
Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.
Updated 2026-11-01