Network forensics is a science that centers on the discovery and retrieval of information surrounding a cybercrime within a networked environment. Common forensic activities include the capture, recording and analysis of events that occurred on a network in order to establish the source of cyberattacks. https://fidelissecurity.com/threatgeek/network-security/network-forensics-analysis-detect-threats/