Four Step Process
The overall computer forensics process is sometimes viewed as comprising four stages:

Acquire: Identifying and Preserving;


Analyze: Technical Analysis;


Evaluate: What the Lawyers Do;


Present: Present digital evidence in a manner that is legally acceptable in any legal proceedings;