Network Forensics: Tracking, Investigating and Identifying Threats
This is one definition by the Infosec Institute but to explain it in simpler terms – Network Forensics is a process where we collect and analyze organizations’ traffic data to detect any potential cyberattack or investigate any cybercrime. You can think of network forensics analysis as putting up CCTV cameras on your network so in case of any data breach you can look at recorded data and track the root cause.