This is a question that is asked by many IT professionals. The result of the question is different depending on the type of information that you are looking for. This article talks about types of sources and their uses for cyber forensics experts.
Cyber forensics expert needs to have a deep understanding of cybercrime investigation and digital forensics to figure out what happened during a cyber attack or digital incident. It includes incidents such as phishing scams, data breaches, network intrusions, etc.
The main sources of information in this field are:
Data found on the computers and devices used in the incident
Live evidence captured from CCTV cameras or access points
Evidence gathered through public databases (e.g., domain names registered)