Creating bit-by-bit copies of all digital evidence is one of the most critical parts of the digital forensic process.
The processing part of the digital forensic process can be lengthy depending on what you are looking for. Optimizing processing options will keep the investigation moving faster.
The first phase of the investigation or analysis phase is a first pass to identify low hanging fruit. At this point, a review can take place to help guide the investigation to more relevant data.
The second analysis is when you can start to tell a story with the evidence and/or go deeper with the investigation to find more evidence.
The final phase of the investigation process brings all of the evidence together and is ready for review.