Which scan?
Scan sequence, time, operator information, and device/software context.
THE CHAIN-OF-CUSTODY RECORD
The finding.
The context.
The record.
A result is more useful when you can see what was checked, what was found, and where coverage was limited.
View the actual CoC report
04 / THE SCREENING RECORD
A result with
something behind it.
Review the record in context: the device and scan identity, findings, integrity information, and any limits disclosed by the software.
What was found?
The result, supporting findings, and any incomplete or unexamined areas.
What was recorded?
Available hashes, the stated hashing method, and record signature information.
Know what the hash represents.
A logical file-tree hash describes the selected readable content. It is different from a raw, bit-for-bit image hash of the physical device.