Methodologically, there are at least 14 (fourteen) steps that need to be done in forensic activities, as follows:
1. Computer Crime Occurrence statement - a formal stage where interested parties to report the occurrence of a computer-based criminal activity;
2. Collection of Early Proof Directive or - a stage where forensic experts collect all the clues or evidence that can be used as an initial study of forensic material, both tangible and intangible;
3. Letter Publishing Judgment - a level which is suitable for regulation and legislation in place, the court gave official permission to the researcher or investigator to do aktiivitas associated with processing the crime scene, whether virtual or physical nature;
4. Implementation of Early Response Procedures - a stage where forensic experts conducted a series of procedural safeguards of the crime, whether physical or virtual, so sterile and polluted / contaminated, so it can be considered legitimate in the quest items of evidence;
5. Freezing of Evidence on Area Crime - is the stage where all the evidence was taken, seized and / or frozen through certain formal techniques;
6. The transfer of evidence to the Forensic Laboratory - a stage where do the transfer of evidence from the crime scene to the laboratory where analysis and forensics;
7. Making Copies "2 Bit Stream" on Exhibit - a stage which made the process of duplication of evidence into a form identical copies;
8. Development of "MD5 Checksum" Exhibit - a step to ensure there is no contamination or change in the condition of the existing evidence;
9. Preparation possession Chain of Evidence - a decisive step transfer of responsibility and ownership of the original evidence or duplication from one region to another authority;
10. Original Evidence Storage Safe Place - an original evidence storage stage (original) in a safe place and in accordance with certain technical to keep the same strict authenticity;
11. Copies of Evidence Analysis - a stage where melakuka forensic analysis of the details of the goods to a copy of the collected evidence to obtain conclusions associated with the ins and outs of the crime;
12. Making Forensic report - a phase in which forensic experts concluded the details of things that happened around aktivititas crime forensic analysis based on existing facts;
13. Submission Results Analysis Report - is the stage where the official results of computer forensics confidential documents submitted to the authorities, and
14. Participation in Litigation - is the stage where a forensic expert witness in court related to the crime that happened.
