Authorization and Preparation.
Identification.
Documentation, Collection (Seizure), and Preservation.
Examination and Analysis.
Reconstruction.
Reporting Results.