The initial process of receiving a complaint or referral and documenting key facts, involved parties, known devices/accounts, suspected offenses, and urgency. In digital investigations, intake should capture platform names, URLs, identifiers, time zones, and preservation needs.
