Computer forensics

Application of investigative and analytical techniques to identify, preserve, acquire, examine and present digital evidence in a legally defensible manner. Five-stage pipeline: identification, preservation, acquisition, analysis, presentation.