Description

Network forensics – defined as the investigation of network traffic patterns and data captured in transit between computing devices – can provide insight into the source and extent of an attack. It is used in forensic accounting and with the expansion of information technology it has become a growing field.

Network forensics is a relatively new field of forensic science. Computing has become network-centric. Data is now available outside of disk-based digital evidence. Network forensics can be performed as a standalone investigation or alongside a computer forensics analysis. When used alongside a computer forensic analysis it is used to reveal links between digital devices or reconstruct how a crime was committed.

Network investigations deal with volatile and dynamic information and is a sub-branch of digital forensics. It relates to the monitoring and analysis of computer network traffic for information gathering, legal evidence, or intrusion detection.

This course is a complement to our other courses in the series on becoming a forensic accountant.