Solving the CAPER. The five phase approach to digital forensics investigations.

Most law enforcement digital forensic investigations follow a five phase process methodology consisting of collection, acquisition, processing, examination, and reporting. Though there have been several other methodologies put forward before, I will show how each of those preceding fit within the CAPER model. I will also show which programs, both open-source and proprietary, fall within these five phases. This simplified process model will give digital investigators a more organized direction for workflow and an easier method to memorize.