Digital Forensics helps in identification, preservation, analysis and reporting of the data from the electronic devices such as laptops, computers, mobile phone, USB stick, external hard drive, tablets etc.

Phases of Digital Forensic

Identification:  Identification is the process of identifying the potential evidence from the scene of incident.

Seizure: Prior to the actual examination, the digital media related to the investigation is seized.

Collection: After the media is seized, it is collected in order to preserve the media from contamination.

Analysis: After the process of collection, the evidence is taken for forensic analysis by a forensic examiner to look out for findings that can support or oppose the matters in the investigation. During the analysis the forensic examiner should maintain the integrity of the digital evidence.

Reporting: Upon completion of a forensic analysis, all the relevant findings should be presented in a report format by the forensic investigator.