Information Technology Reference
In-Depth Information
The evidence intake phase
The evidence intake phase is the starting phase and entails request forms and paperwork to
document ownership information and the type of incident the mobile device was involved
in, and outlines the type of data or information the requester is seeking. Developing specif-
ic objectives for each examination is the critical part of this phase. It serves to clarify the
examiner's goals.
