Forensic

Forensic
Refers to the discipline of investigating the aftermath of a cyberattack. Investigators attempt to understand the sequence of events during the attack by searching for clues left behind by the attacker(s). Forensic analyses are carried out on various sources of digital data (disk dumps, memory, network captures, logs, etc.), collected where possible starting with the most volatile sources (RAM and network pcap, followed by hard drives and logs).