Which one of the following is an appropriate flow of steps in the computer forensics process?

Computer forensics is methodical series of techniques and procedures for gathering evidence from computing equipment, various storage devices and or digital media that can be presented in a course of law in a coherent and meaningful format.

Which one of the following is an appropriate flow of steps in the computer forensics process?
A . Examination> Analysis > Preparation > Collection > Reporting
B . Preparation > Analysis > Collection > Examination > Reporting
C . Analysis > Preparation > Collection > Reporting > Examination
D . Preparation > Collection > Examination > Analysis > Reporting

Answer: D