The Digital Forensics Process

Techniques for preserving evidence and maintaining effective chain of custody include making digital copies of original evidence, photographing physical evidence, taking screenshots of digital evidence, documenting the date and time receipts and saving analytic data on separate computers. Additionally when working with electronic evidence it is important to always conduct testing and analysis on copies of the original evidence. This way you are able to learn from the evidence without corrupting the integrity of the original data.
---
Learn digital forensics https://www.udemy.com/course/digital-forensics/