Preservation Checklist: Quarantine the Device, Hold the Account
Edition 2026-11-03

The laptop in the drawer and the account scheduled for deletion are usually the whole record. This checklist coordinates custody of the device, protection of the account and capture of the sources that expire first, so that nothing is lost to routine offboarding before an examiner arrives.

Contents

computer_forensics_preservation_checklist.html          The checklist with its guidance, sources and contacts. Open it in any browser or print it.
computer_forensics_preservation_checklist_workbook.csv  The working checklist. Open it in Excel or any spreadsheet and fill in one row per item.

How to use it. Read the checklist page first. Then open the CSV, assign an owner to each row and record the date each action happens. Update the Status column as the work is recorded. In the evidence column, record an evidence ID or the location of your secure repository, where passwords, recovery keys and the evidence itself are kept. When you are ready to begin, call GDF and a senior examiner will walk through the checklist with you.

Talk to a senior examiner. The initial consultation is free. Call (800) 868-8189 at any hour, or write to info@evestigate.com.

© 2026 Global Digital Forensics, Inc. All rights reserved.
