Forensic Process

Question 1

Preparation

Answer 1

first step: training certification and instruction on forensic tools

Question 2

Collection

Answer 2

second step: recording computer log files

Question 3

Analysis

Answer 3

third step: Exam the evidence

Question 4

Reporting

Answer 4

Fourth step: write a report of the incident