Which of the following is the MOST ACCURATE statement regarding the analysis phase in digital forensic investigations?