Question

Name and briefly explain the four steps that are part of the forensic investigation process. Write your answer in 1-2 sentences.

(2 points)

Answer 1

The four steps are identification (recognize and define the incident and relevant evidence), preservation/collection (secure the scene, collect evidence, and maintain chain of custody), examination/analysis (use forensic techniques and tools to extract, interpret, and validate data), and presentation/reporting (document findings, produce clear reports, and present evidence in legal proceedings).