Digital Forensics

Updated 28 Jul 2026

•
def
- •
  the formal process of collecting, preserving, and analyzing evidence from a security incident in a way that will hold up to legal/organizational scrutiny
•
process
- •
  Legal Hold
- •
  Chain of Custody
- •
  acquisition — collecting the evidence itself (see Forensic Acquisition)
- •
  Preservation (Digital Forensics)
- •
  reporting — documenting findings clearly and objectively
- •
  E-discovery
•
related
- •
  Incident Response

Linked references 6