Log every handover of each evidence item, in the order it happened. The tool checks that the person who received an item is the person who released it next, that dates run forward, and that seals or hash values are recorded, and then gives you a clean log and a list of gaps.
List the lines for each item in the order the handovers happened. The check compares each line with the one before it for the same item.
The tool checks the log for gaps. It does not decide whether evidence is admissible. Follow your engagement terms, the rules that apply to the forum and, for digital evidence, the current legal requirements.
| Item | Description | Handovers | Now held by | Problems |
|---|---|---|---|---|
| EV-01 | Laptop of finance manager | 3 | Evidence locker | 2 |
| EV-02 | Bank statements printout | 2 | Investigator B | 3 |
| EV-03 | Email export on USB | 1 | Investigator B | 0 |
| Row | Item | Problem |
|---|---|---|
| 4 | EV-01 | Chain break: previous holder was Evidence locker, but this line shows Forensic analyst releasing it; Seal or hash differs from the previous line. Record the reason |
| 5 | EV-02 | No seal or hash recorded |
| 6 | EV-02 | No seal or hash recorded; Date is earlier than the previous handover |
Row numbers count the header as row 1. Fix each break by finding the missing handover or correcting the entry, not by changing names to match.
Evidence is only as reliable as its record of who held it. Each release should match the previous receipt, dates should run forward and the seal or hash should stay the same unless a reason is written down. Checking this as you go costs minutes. Explaining a gap in a hearing costs credibility.
Lines are grouped by item ID and read in the order you list them. Each line needs a valid date, a releasing person and a receiving person.
For each line after the first, the tool checks that the releaser matches the previous receiver, that the date is not earlier, and that the seal or hash matches the previous line.
Every problem is listed by row. The Excel file adds signature columns for both parties.
A laptop is received by Investigator A, who passes it to the evidence locker. The next line shows a forensic analyst releasing it from the locker.
