The practice of collecting, preserving, and analyzing digital evidence in a way that maintains its integrity for investigation or legal use.
Digital forensics requires strict chain-of-custody procedures — every step of evidence handling must be documented, since sloppy handling can make evidence inadmissible or unreliable.
