Acquiring, retrieving, and analyzing data in computers and proving that the evidence provided is true. It also allows you to define whether additional inquiry is warranted by quickly finding, recognizing, and prioritizing possible evidence in computers. This will cause a reduced backlog so that investigators can focus on getting to case closed.