Explains chain of custody for digital evidence
Who collected what, when and how, with hash values, so collected data can be shown unaltered (ISO/IEC 27037).
Can AI do this?
AI does this well Most of the tested AI models master this. 3 of 4 models in the current benchmark master it.
| Model | Tier | Probability of mastery | Status |
|---|---|---|---|
| gemini-4-argon | Flagship | 91% | Mastered |
| gemini-3.5-flash-lite | Low cost | 90% | Not shown |
| gpt-6-luna | Low cost | 99% | Mastered |
| claude-haiku-5-5 | Low cost | 99% | Mastered |
Mastered means a probability of at least 90% that the model has this knobit, estimated from its graded answers. “Not shown” means the answers do not settle it either way. How the models are tested.
What it looks like in practice
Expected result: Who collected what, when and how, with hash values, so collected data can be shown unaltered (ISO/IEC 27037).
How it is assessed: Answers a written question on the chain of custody correctly
Related knobits
Needed for
All 14 knobits of Apply legal holds and support e-discovery.
Source: Practice the stage 4 reference and review checklist rest on