Knowledge selection Identify the digital equipment or storage media containing details, metadata or other digital data suitable to your digital forensics investigation.Detection and Evaluation: Incident responders watch the network for suspicious action. They analyze information, filter out Bogus positives and triage alerts.They overlook customer s