Digital forensics has become a vital tool in providing evidence in cases such as computer misuse and attacks against computer systems as well as more traditional crimes such as murder, money laundering, drugs, abuse and fraud. This paper presents three major phases of digital forensics and nature of tools used in these phases.