In digital forensics, all investigations follow the same basic methodology once permission for search and seizure has been obtained. Which is one of the elements of that process?