Term:Collection

From FISMApedia

NIST SP 800-86

Collection - The first phase of the computer and network forensics process, which involves identifying, labeling, recording, and acquiring data from the possible sources of relevant data, while following guidelines and procedures that preserve the integrity of the data.