Objective	Description
Prepare for a digital investigation	todo
Find potential digital evidence sources	todo
Prioritize digital evidence sources	todo
Preserve digital evidence	todo
Access device data for acquisition	todo
Overcome protection mechanisms	todo
Acquire data	todo
Store acquired data	todo
Read data from digital evidence storage formats	todo
Reduce data under consideration	todo
Access partitions, volumes and file systems data	todo
Extract artifacts stored by the operating system	todo
Extract artifacts stored by applications	todo
Extract data from specific formats	todo
Extract specific artifact types	todo
Locate potentially relevant content	todo
Review content for relevance	todo
Detect anti-forensics and other anomalies	todo
Establish identities	todo
Create visualizations	todo
Conduct research	todo
Reconstruct events	todo
Evaluate evidence	todo
Document digital forensic activities	todo