Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
Network forensics captures and analyzes network traffic to reconstruct attacks, detect exfiltration, and support incident investigations.
Network Forensics Definition: Network forensics captures and analyzes network traffic to reconstruct attacks, detect exfiltration, and support incident investigations.
Network forensics is the capture, recording, and analysis of network traffic to investigate security incidents, reconstruct attacker activity, and support legal evidence. It relies on packet captures, flow records, and protocol analysis to identify exfiltration, lateral movement, and command-and-control, and is a specialized branch of digital forensics focused on data in transit.
Turn knowledge into credentials with our instructor-led cybersecurity boot camps.
View All Courses →