Glossary
Network Forensics
Network forensics is CSI for networks - examining traffic recordings to understand what attackers did and how.
What is Network Forensics?
Capturing and analyzing network traffic to investigate security incidents and gather digital evidence.
Why Should You Care?
Network evidence reveals attack timelines, data accessed, and lateral movement paths during incident response.
Is your business exposed?
Real-World Example
Network forensics reveals the exact files exfiltrated by correlating PCAP data with C2 communications.
How to Protect Against Network Forensics
- 1.
Establish network forensics capabilities
- 2.
Ensure sufficient packet capture retention
Related Terms
Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required