Evidence Item #001
Evidence Item #001
- Type: Memory Dump
- Source: WORKSTATION-001
- Collection Time: 2024-01-15 14:45:00 UTC
- Collected By: S. Johnson
- Method: WinPMEM v3.3
- Size: 8.2 GB
- Hash (SHA256): a7d2c9e8f3b5...
- Storage Location: Evidence Server /cases/2024-0145/memory/
- Chain of Custody: Maintained (see form COC-001)