We determine the identity of the Internet of things (IoT) such as sensors or anything that has a connection such as a router and the preservation of evidence needs to obtain evidence from its owners and after that, we have an analysis phase in which some forensic tools are used The FTK computer is used in the electronic discovery process and finally, it presents the investigators to obtain the results and reasons, Its importance is considered to be special for dialogue and scenario within the process, because the Internet of things(IoT) systems contain different settings, for example, forensic things in Amazon.