Watch this video on YouTube
At which stage of the digital triage process would evidence like a log file be collected?