Internship← Digital Forensics learning pathDigital Forensics · Module 2 of 10
The forensic process
Follow a structured investigation workflow.
📖 Key ideas
- Identification: find potential evidence sources.
- Preservation: protect evidence from change.
- Collection/acquisition: make forensic copies.
- Examination and analysis: find relevant artefacts.
- Reporting: document findings clearly for decision makers or courts.
💡 Real-life example: The forensic process is a careful recipe: skip a step and the dish (case) can be rejected.
IdentificationLocating evidence sources
PreservationProtecting evidence integrity
AcquisitionCreating a forensic copy
ReportingDocumenting findings