Chain Of Custody is the documented handling history of evidence from collection through storage, transfer, analysis, and disposition.
Chain Of Custody is part of security operations and incident response, helping teams detect activity, preserve evidence, coordinate response, and improve controls after an event.