After receiving the hard drive from detectives, the forensic analyst for a court case used a log to capture corresponding events prior to sending the evidence to lawyers. Which of the following do these actions demonstrate?

A. Chain of custody
B. Order if volatility
C. Data analysis
D. Tracking man hours and expenses

Answer: A. Chain of custody