Digital forensics techniques — disk imaging, file recovery, memory analysis, network traffic reconstruction, and mobile device extraction. What investigators can find and how to understand the threat model.