There are lots of different ways to collect digital evidence for computer forensics and incident response investigations. There is only one way to make sure that that digital evidence later holds up to judicial, legislative or regulatory oversight. That is done through documenting and handling the evidence properly.
‍