The digital forensic process has the following five basic stages: Identification – the first stage identifies potential sources of relevant evidence/information (devices) as well as key custodians and location of data. ... Analysis – an in-depth systematic search of evidence relating to the incident being investigated.