According to the forensics investigation process, what is the next step carried out right after collecting the evidence?