Collecting and analyzing evidentiary data to determine the cause of an incident.
A technique for preserving, collecting, and analyzing digital data to determine the cause of an incident or for legal evidence. Managing a "chain of custody" that records the collection process is important to preserve the evidence's admissibility.
© 2026 ITBGM