Understanding the world of digital forensics in cybersecurity requires a thorough understanding of the '9 phases of digital forensics'. This respective field, standing at the intersection of law enforcement, cybersecurity and technology, is an essential one, particularly in our digital age. This comprehensive guide aims not only to introduce digital forensics but dissect it into nine comprehensive stages to equip readers, whether they're professionals or beginners, with a rounded understanding of the sphere.

Phase 1: Identification

The first phase is identification. It involves identifying and understanding the full scope of a potential security incident, primarily through monitoring system logs and user reports. The key at this stage is to gather enough preliminary information to provide an investigative starting point.

Phase 2: Preparation

The preparation phase includes preparing the physical and digital tools necessary for investigation. This phase also involves arranging an isolated workstation to handle data collection and analysis, ensuring the original data remains intact.

Phase 3: Approach Strategy

An approach strategy is developed after identifying and preparing. It is imperative to formulating a methodical, systematic reaction to an incident. The strategy must be comprehensive in nature, detailing elements like chain of custody protocols, investigation methods and report formation.

Phase 4: Preservation

In the preservation phase, forensic practitioners create an exact replica of the digital evidence, ensuring that the original remains uncompromised. The preservation phase also includes timestamp capturing, essential to maintaining the integrity of the information.

Phase 5: Collection

The data collected previously is now organized systematically. The collection should always happen in a controlled and documented manner. This stage also involves consolidating data from multiple sources into the forensic workstation for accessing during the analysis.

Phase 6: Examination

The examination phase consists of using various forensic tools and methods to examine the collected data. Objectives at this stage typically include data recovering, keyword searching, hidden file detection, and system log analysis.

Phase 7: Analysis

Analysis represents one of the core parts of the '9 phases of digital forensics', where investigators aim to link collected evidences-giving them context and meaning. This phase may utilize correlation analysis, timeline analysis, link analysis, or other techniques to comprehensively dissect the incident.

Phase 8: Presentation

In the presentation phase, forensic experts present the findings to non-technical stakeholders like managers, attorneys, or court personnel. The information must be conveyed thoroughly and comprehensively, keeping technical jargon to a minimum.

Phase 9: Review

The review phase is essentially a post-mortem, wherein investigators review the entire process. This phase helps identifying areas of strengths and weaknesses in the entire digital forensics procedure and provides insights for improvement in future investigations.

In conclusion, an understanding of the '9 phases of digital forensics' is crucial to anyone looking to make a foray into digital forensics in cybersecurity. Each phase has its own unique set of challenges and considerations and offers an overview of what to expect when handling digital forensics investigations in cybersecurity.