Lincoln, a forensic investigator, collected eThomas, a forensic investigator, was working on a suspected machine to gather potential evidence. In this process, he went through all the evidence sources such as logs, configuration files, and cookies. Subsequently, he analyzed the evidentiary data to identify the criminal. Identify the forensics investigation phase demonstrated in the above scenario. Preparatory phase Pre-investigation phase Post-investigation phase Investigation phasevidence from a crime scene. He used some hardware and software tools to complete the investigation process. Lincoln then created a report and documented all the actions performed during the investigation. Identify the investigation phase Lincoln is currently in. Preparatory phase Pre-investigation phase Investigation phase Post-investigation phase