Log forensics is a practice that involves collecting, analyzing, and preserving log data to identify the time a security incident was initiated, who initiated the incident, the sequence of actions they took, and the impact it had on an organization. It also helps to identify the data that has been affected by an attack and to identify the attack pattern.