Digital Forensics is the discipline of collecting, preserving, and analysing digital evidence from devices, networks, and files.
Subfields
- Disk Forensics — disk image analysis (Autopsy, Sleuth Kit).
- Memory Forensics — memory dump analysis (Volatility).
- Network Forensics — pcap analysis (Wireshark, Zeek).
- Mobile Forensics — iOS/Android artefacts.