The process of identifying, preserving, analyzing and presenting digital evidence in a manner that is legally acceptable.

Gathering and analyzing data in a manner as free from distortion or bias as possible to reconstruct data or what has happened in the past on a system

.