Once identified, digital evidence must be preserved.
Preserving digital evidence begins with collecting evidence without altering.