It uses five key phases:
Collect: Ensure data from endpoints is copied and preserved.
Ingest: Import low-level data and normalize to higher-level information artifacts.
Automated Analysis: Score artifacts using analysis pipelines to highlight evidence.
Assisted Examination: Review findings, understand the scope, and find more evidence.
Report: Generate human and machine readable reports with the findings.

Home Page - https://www.cybertriage.com/