Network Forensics

Traditional forensic methodologies require physical access to subject hard drives. The emerging area of network based forensic facilitates the collection and analysis of data over the LAN or WAN, removing the requirement to physically visit each site where subject data resides.