Network Forensics

The investigation of network traffic and logs to uncover evidence of cybercrimes, intrusions, or data exfiltration, often using packet captures and protocol analysis.