The evidence intake phaseThe identification phaseThe legal authorityThe goals of the examinationThe make, model, and identifying information for the deviceRemovable and external data storageOther sources of potential evidenceThe preparation phaseThe isolation phaseThe processing phaseThe verification phaseComparing extracted data to the handset dataUsing multiple tools and comparing the resultsUsing hash valuesThe document and reporting phaseThe presentation phaseThe archiving phase