The overall computer forensics process is sometimes viewed as comprising four stages:

Acquire: Identifying and Preserving;

Analyze: Technical Analysis;

Evaluate: What the Lawyers Do;

Present: Present digital evidence in a manner that is legally acceptable in any legal proceedings;