Which document must be obtained before an on-site digital investigation?

• A. Subpoena
• B. Habeas corpus
• C. Search warrant
• D. Modus operandi

Answer: (C)

A search warrant provides the legal authority to enter a location, search for digital evidence, and seize devices or data. It is issued by a judge based on probable cause and specifies the exact places and items that may be searched, helping define the scope and protect rights and admissibility in court. In a digital investigation, having a warrant ensures that the on-site activities are legally defensible and that the collected evidence can be used in proceedings. Subpoenas can compel production but do not authorize a physical search of a site. Habeas corpus concerns detention rights, not digital investigations, and modus operandi refers to a suspect’s method of operation, not a legal document.